Path Traversal Vulnerability in gpt_academic by Binary Husky

CVE-2024-11037

What is CVE-2024-11037?

A path traversal vulnerability exists in the gpt_academic project by Binary Husky, allowing attackers to bypass security measures that protect sensitive configuration paths. Specifically, an attacker can access sensitive information, including the OpenAI API key, by exploiting a specific URL on Windows operating systems that includes the absolute path of the project. This can lead to significant data exposure and potential misuse of API credentials.

References