Back to Database
Status published
Medium
CVE-2024-10100
Path Traversal in binary-husky/gpt_academic
Vulnerability Description
A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of the file parameter, which is open to path traversal through URL encoding. This allows attackers to view any file on the host system, including sensitive files such as critical application files, SSH keys, API keys, and configuration values.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-10100
Credits & Attribution
No credits recorded in the NVD database.
More from binary-husky
View All →CVE-2025-25185
GPT Academic allows arbitary file read by tarfile uncompress within softlink
High
7.5
CVE-2025-10236
binary-husky gpt_academic LaTeX File latex_toolbox.py merge_tex_files_ path traversal
Medium
5.3
CVE-2025-0183
Stored XSS in binary-husky/gpt_academic
Medium
5.4
CVE-2024-31224
GPT Academic: Pickle deserializing cookies may pose RCE risk
Critical
9.8
CVE-2024-12392
Server-Side Request Forgery (SSRF) in binary-husky/gpt_academic
Medium
6.5
Affected Vendor
binary-husky
View all reports →Affected Software
binary-husky/gpt_academic
Vulnerable Versions:
unspecified
Timeline
Official Publish:
October 17th, 2024
Last Modified:
April 4th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N