Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-65720: Open Source GPT Researcher v3.3.7 allows arbitrary command execution

CVE-2025-65720 CVE-2025-65720

Summary

Attackers can trick users into opening a malicious webpage, giving them control over the system. This is a serious security risk because it allows attackers to take control of your computer and steal sensitive information or cause damage. You should update to the latest version of Open Source GPT Researcher to fix this issue.

Original title

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.

Original description

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.

Vulnerability type

CWE-77 Command Injection

Published: 15 Jul 2026 · Updated: 17 Jul 2026 · First seen: 15 Jul 2026