EventPast event
GPT Researcher v3.3.7 MCP STDIO configuration can lead to remote command execution
Start here
AI overview
The open-source project GPT Researcher v3.3.7 has a vulnerability that allows an attacker to execute arbitrary commands on the victim's system by inducing the user to interact with a specially crafted HTML page. The issue is related to the MCP STDIO configuration, and a GitHub security advisory has been published as GHSA-8j86-h8gg-797p.
Generated by AI from reports · Updated 5 days ago
Progress timeline
Oct 3
- GitHub 安全公告GPT Researcher v3.3.7's MCP STDIO configuration has a remote command execution vulnerability
The open-source project GPT Researcher v3.3.7 has a vulnerability that allows an attacker to execute arbitrary commands on the victim's system by inducing the user to interact with a specially crafted HTML page. The issue is related to the MCP STDIO configuration, and a GitHub security advisory has been published as GHSA-8j86-h8gg-797p.
Related discussion
Attention trend
New sources per day
- Oct 3: 1 new sources (1 outlets, 0 accounts)
- Oct 4: 0 new sources (0 outlets, 0 accounts)
- Oct 5: 0 new sources (0 outlets, 0 accounts)
- Oct 6: 0 new sources (0 outlets, 0 accounts)
- Oct 7: 0 new sources (0 outlets, 0 accounts)
- Oct 8: 0 new sources (0 outlets, 0 accounts)
- Oct 9: 0 new sources (0 outlets, 0 accounts)
- Oct 10: 0 new sources (0 outlets, 0 accounts)
- Oct 11: 0 new sources (0 outlets, 0 accounts)
- Oct 12: 0 new sources (0 outlets, 0 accounts)
- Oct 13: 0 new sources (0 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)