CVE-2024-10954CWE-94

Prompt Injection Leading to RCE in binary-husky/gpt_academic Plugin `manim`

High · published March 20, 2025

CVSS v3.0
8.8
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

In the `manim` plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code execution (RCE) on the app backend server by injecting malicious code through the prompt.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01508 · 74.2th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-03-20T10:10Z
EPSS history
Timeline
  • 20 MAR 10:10Z
    Prompt Injection Leading to RCE in binary-husky/gpt_academic Plugin `manim`
    cvelistv5