Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the run_in_subprocess_wrapper_func function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27958.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-0763 affects GPT Academic, an open-source LLM tool with 70K+ GitHub stars. SonicWall Capture Labs assessed the CVSS 9.8 flaw and developed protections against it. Read the research for mitigation steps. https://bit.ly/3NZWZBZ https://t.co/2O4pHcSUPC
Post summary
SonicWall Capture Labs has analyzed CVE-2026-0763, rated CVSS 9.8, and released mitigation instructions to protect users of the GPT Academic LLM tool.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | binary-husky | gpt_academic | 3.91 | - | - |