Skip to content
OpenAdvisories

Vendor

papersgpt

1 known vulnerabilities.

Products

papersgpt-for-zotero 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-73032

    PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()

    PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts. Attackers can exploit thi…

    papersgpt papersgpt-for-zotero