Description
A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations.
Critical · 9.8
CVE-2026-37006
EUVD-2026-67270GHSA-4pfw-7888-8q2g
A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code ex…
Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by mitre