CVE-2024-10986

HIGH

GPT Academic 3.83 - Local File Read via HotReload Symlink Handling

Title source: llm
STIX 2.1

Description

GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can download and extract tar.gz files from arxiv.org. Despite implementing protections against path traversal, the application overlooks the Tarslip triggered by symlinks. This oversight allows attackers to read arbitrary local files from the victim server.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0070
EPSS Percentile 48.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-59
Status published
Products (1)
binary-husky/gpt_academic 3.83
Published Mar 20, 2025
Tracked Since Feb 18, 2026