Symbolic Link Vulnerability in GPT Academic by Binary Husky

CVE-2025-25185

What is CVE-2025-25185?

The vulnerability in GPT Academic affects versions 3.91 and earlier, allowing attackers to exploit soft links. By creating a malicious file that points to a legitimate target file, an attacker can package this malicious soft link into a tar.gz file and upload it. When the server decompresses the file, the soft link will reference the target file, enabling unauthorized access to read any file on the server. This vulnerability poses substantial security risks, particularly in environments where sensitive data is handled.

References