Remote Code Execution Vulnerability in Manim Plugin of Binary-Husky/GPT_Academic

CVE-2024-10954

What is CVE-2024-10954?

A critical vulnerability exists in the Manim plugin of Binary-Husky's gpt_academic, wherein user-provided prompts can lead to the execution of untrusted code on the application server. Due to inadequate handling of these prompts, an attacker can inject malicious code, enabling the potential for remote code execution (RCE). This issue underscores the importance of secure coding practices and the need for proper sandboxing of user inputs to mitigate exploitation risks.

References