CVE-2024-10954: Binary-Husky Gpt Academic

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

In the `manim` plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code execution (RCE) on the app backend server by injecting malicious code through the prompt.

Affected products

• Binary-Husky Gpt Academic: affected versions not specified

Published 2025-03-20. Last modified 2026-06-17.