GPT Academic Vulnerability Affects Interactive Language Models

CVE-2024-31224

What is CVE-2024-31224?

A newly identified vulnerability in the GPT Academic application, particularly affecting versions 3.64 through 3.73, poses a significant security risk. This issue arises from the application's handling of deserialized data received from clients, which is deemed untrustworthy. The exploitation of this vulnerability could potentially enable attackers to execute arbitrary code on any device that exposes the GPT Academic service to the Internet. Users are advised to upgrade to version 3.74, which contains fixes to address this critical flaw. Currently, there are no alternative workarounds available to mitigate the risk without updating.

References