Vulnerability GHSA-8j86-h8gg-797p

Critical
CRITICAL RISK
CVSS Score: 9.8
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
3 months ago
July 16, 2026 at 12:31 AM UTC
GPT Researcher MCP STDIO configuration allows remote command execution
0.14.5 - 0.14.7
0.14.5 - 0.14.7

Summary

GPT Researcher MCP STDIO configuration allows remote command execution

Details

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.

Impacted packages

Timeline

Published
3 months ago
July 16, 2026 at 12:31 AM UTC
Last Modified
12 days ago
October 02, 2026 at 10:45 PM UTC