Path Traversal Vulnerability in gpt_academic by Binary Husky

CVE-2024-11037

What is CVE-2024-11037?

A path traversal vulnerability exists in the gpt_academic project by Binary Husky, allowing attackers to bypass security measures that protect sensitive configuration paths. Specifically, an attacker can access sensitive information, including the OpenAI API key, by exploiting a specific URL on Windows operating systems that includes the absolute path of the project. This can lead to significant data exposure and potential misuse of API credentials.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References