GPT Researcher v3.3.7's MCP STDIO configuration has a remote command execution vulnerability
GPT Researcher MCP STDIO configuration allows remote command execution
AI summary
The open-source project GPT Researcher v3.3.7 has a vulnerability that allows an attacker to execute arbitrary commands on the victim's system by inducing the user to interact with a specially crafted HTML page. The issue is related to the MCP STDIO configuration, and a GitHub security advisory has been published as GHSA-8j86-h8gg-797p.