Gpt Academic

Vendor:

First CVE: May 31, 2023 · Active for 3 years

29
Total CVEs
More Total CVEs than 96% of tracked products
7.3
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 60% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Gpt Academic over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 31, 2023
3 years ago
Most Recent CVE
Jan 23, 2026
185 days ago

CVE Severity & Scoring

Gpt Academic29 CVEs
All CVEs352,727 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network29 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low28 (96.6%)
High1 (3.4%)
Unknown0 (0.0%)
User Interaction
None24 (82.8%)
Unknown0 (0.0%)
Required5 (17.2%)
Privileges Required
Low16 (55.2%)
High0 (0.0%)
None13 (44.8%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (29 CVEs).

29 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-0764CRITICAL
GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa
Jan 23, 20269.831NONO
CVE-2026-0763CRITICAL
GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c
Jan 23, 20269.830NONO
CVE-2024-10812MEDIUM
An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by user-controlled input in t
Mar 20, 20256.127NOYES
CVE-2024-31224CRITICAL
GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server deserializes untrustworthy
Apr 8, 20249.827NONO
CVE-2026-0762HIGH
GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins
Jan 23, 20268.125NONO
CVE-2025-10236HIGH
A vulnerability has been found in binary-husky gpt_academic up to 3.91. Impacted is the function merge_tex_files_ of the file crazy_functions/latex_fns/latex_toolbox.py of the comp
Sep 11, 20257.525NONO
CVE-2024-12390HIGH
A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The application supports the extraction of user-provided RAR files without proper
Mar 20, 20258.825NONO
CVE-2024-12389HIGH
A path traversal vulnerability exists in binary-husky/gpt_academic version git 310122f. The application supports the extraction of user-provided 7z files without proper validation.
Mar 20, 20258.824NONO
CVE-2024-11039HIGH
A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gpt_academic versions up to and including 3.83. This vulnerabil
Mar 20, 20258.824NONO
CVE-2024-10986HIGH
GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can download and extract tar.gz files from arxiv.org.
Mar 20, 20258.824NONO
View all 29 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (29 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
3.4% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (29 CVEs).

Media Mentions

Signals from CVEs in this product scope (29 CVEs).

Top CNAs Publishing CVEs For Gpt Academic

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
3.9139.20.9%00
3.9015.40.4%00
3.83117.20.6%01
2024-10-1567.31.0%00
2024-10-1016.51.0%00