CVE-2026-5631 Details
Description
A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract_command_data of the file backend/server/server_utils.py of the component ws Endpoint. Such manipulation of the argument args leads to code injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A remote code execution vulnerability has been identified in Assafelovic GPT-Researcher versions through 3.4.3. The issue arises in the WebSocket '/ws' endpoint, specifically within the 'extract_command_data' function of 'backend/server/server_utils.py'. This vulnerability allows for code injection by manipulating the 'args' parameter, which is then passed to 'anyio.open_process()' without any validation or sanitization. As a result, an attacker can execute arbitrary commands on the server with the same privileges as the application process.
It is recommended to allowlist MCP commands, require authentication for the WebSocket endpoint, disable MCP by default, and sandbox MCP processes.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 6, 2026CISA-ADP
Assessed Apr 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/assafelovic/gpt-researcher/ | [email protected] | ProductVendor |
| https://github.com/assafelovic/gpt-researcher/issues/1694 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://vuldb.com/submit/785858 | [email protected] | Technical Description |
| https://vuldb.com/vuln/355419 | [email protected] | AdvisoryExploitPartial Content |
| https://vuldb.com/vuln/355419/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-74 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | [email protected] |
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| assafelovic gpt-researcher | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Apr 6, 2026 | New CVE Received | [email protected] |