CyberRota Analysis
AI-GeneratedThe vulnerability in the WebSocket endpoint of gpt-researcher versions 0.14.7 and earlier allows unauthenticated remote attackers to execute arbitrary code through malicious Model Context Protocol configurations. Organizations using affected versions should prioritize this issue to mitigate potential exploitation risks, as it could lead to unauthorized access and control over systems. Immediate action is recommended for those managing deployments of gpt-researcher to ensure security and integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations.