CRITICAL9.8

PYSEC-2026-4219

GPT Researcher MCP STDIO configuration allows remote command execution

Details

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/gpt-researcher

Introduced in: 0.14.5

No fixed version published yet for gpt-researcher (pip). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-65720[ADVISORY]
https://github.com/assafelovic/gpt-researcher[PACKAGE]
https://www.ox.security/blog/gpt-researcher-remote-code-execution[WEB]
https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem[WEB]
https://pypi.org/project/gpt-researcher[PACKAGE]
https://github.com/advisories/GHSA-8j86-h8gg-797p[ADVISORY]