CVE-2026-0762

NONE EPSS 48.5%
Published Jan 23, 20265mo ago · Modified Jun 17, 20262w ago
Find Similar
Published Jan 23, 2026 5mo ago
Last Modified Jun 17, 2026 2w ago

Description

GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Interaction with a malicious DAAS server is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the stream_daas function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27956.

Threat Intelligence

EPSS Exploit Probability
48.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-502 Deserialization of Untrusted Data Validation

Affected Products 1

VendorProductVersionRange
binary-huskygpt_academic3.91any

References 1

  • zerodayinitiative.com https://www.zerodayinitiative.com/advisories/ZDI-26-028/
    MitigationThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.