CVE-2024-10950
CVSS 3.0 Score 8.8 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 94
Summary
CVE-2024-10950 is a code injection vulnerability affecting the `CodeInterpreter` plugin in binary-husky's gpt_academic version 3.83 and below. The flaw arises from the execution of user-supplied prompts, which can generate untrusted code without proper sandboxing. An attacker can exploit this vulnerability to inject and execute malicious code on the application backend server, potentially leading to remote code execution and full server control.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.