{"schema_version":1,"title":"Assaf Elovic Gpt-Researcher vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Assaf Elovic Gpt-Researcher: 0 in the last 7 days and 2 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-37006, was published on 27 August 2026.","url":"https://junglewise.ai/threats/technologies/gpt-researcher","json_url":"https://junglewise.ai/threats/technologies/gpt-researcher.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/gpt-researcher","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":3,"all_time":7,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":2,"last_365_days":7},"latest":[{"cve":"CVE-2026-37006","cvss":9.8,"epss":0.0089,"slug":"cve-2026-37006-gpt-researcher-websocket-code-execution-via-model-context","title":"gpt-researcher WebSocket code execution via Model Context Protocol","severity":"critical","exploited":false,"published_at":"2026-08-27T20:17:41.423+00:00","url":"https://junglewise.ai/threats/cve-2026-37006-gpt-researcher-websocket-code-execution-via-model-context"},{"cve":"CVE-2025-65720","cvss":8.8,"slug":"cve-2025-65720-assafelovic-gpt-researcher-command-injection-in-mcp-stdio","title":"assafelovic GPT Researcher command injection in MCP STDIO","severity":"info","exploited":false,"published_at":"2026-07-15T22:16:45.417+00:00","url":"https://junglewise.ai/threats/cve-2025-65720-assafelovic-gpt-researcher-command-injection-in-mcp-stdio"},{"cve":"CVE-2026-5633","cvss":7.3,"epss":0.0028,"slug":"cve-2026-5633-assafelovic-gpt-researcher-ssrf-in-ws-endpoint","title":"assafelovic gpt-researcher SSRF in ws Endpoint","severity":"high","exploited":false,"published_at":"2026-04-06T08:16:39.487+00:00","url":"https://junglewise.ai/threats/cve-2026-5633-assafelovic-gpt-researcher-ssrf-in-ws-endpoint"},{"cve":"CVE-2026-5632","cvss":7.3,"epss":0.0041,"slug":"cve-2026-5632-assafelovic-gpt-researcher-missing-authentication-in-rest-api-and","title":"assafelovic gpt-researcher missing authentication in REST API and WebSockets","severity":"high","exploited":false,"published_at":"2026-04-06T07:16:02.197+00:00","url":"https://junglewise.ai/threats/cve-2026-5632-assafelovic-gpt-researcher-missing-authentication-in-rest-api-and"},{"cve":"CVE-2026-5631","cvss":7.3,"epss":0.0031,"slug":"cve-2026-5631-assafelovic-gpt-researcher-rce-in-websocket-endpoint","title":"assafelovic gpt-researcher RCE in WebSocket endpoint","severity":"high","exploited":false,"published_at":"2026-04-06T07:16:01.983+00:00","url":"https://junglewise.ai/threats/cve-2026-5631-assafelovic-gpt-researcher-rce-in-websocket-endpoint"},{"cve":"CVE-2026-5630","cvss":4.3,"epss":0.0034,"slug":"cve-2026-5630-assafelovic-gpt-researcher-xss-in-report-api","title":"assafelovic gpt-researcher XSS in Report API","severity":"medium","exploited":false,"published_at":"2026-04-06T07:16:01.757+00:00","url":"https://junglewise.ai/threats/cve-2026-5630-assafelovic-gpt-researcher-xss-in-report-api"},{"cve":"CVE-2026-5625","cvss":4.3,"epss":0.0029,"slug":"cve-2026-5625-assafelovic-gpt-researcher-xss-in-websocket-interface","title":"assafelovic gpt-researcher XSS in WebSocket Interface","severity":"medium","exploited":false,"published_at":"2026-04-06T06:16:21.86+00:00","url":"https://junglewise.ai/threats/cve-2026-5625-assafelovic-gpt-researcher-xss-in-websocket-interface"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Assaf Elovic Gpt-Researcher","slug":"gpt-researcher","vendor":{"name":"Assaf Elovic","slug":"assaf-elovic","url":"https://junglewise.ai/threats/vendors/assaf-elovic"},"aliases":[],"category":"library","homepage":"https://gptr.dev/","repo_url":"https://github.com/assafelovic/gpt-researcher","description":"An autonomous agent designed for comprehensive online research on a variety of tasks.","url":"https://junglewise.ai/threats/technologies/gpt-researcher"},"most_severe":[{"cve":"CVE-2026-37006","cvss":9.8,"epss":0.0089,"slug":"cve-2026-37006-gpt-researcher-websocket-code-execution-via-model-context","title":"gpt-researcher WebSocket code execution via Model Context Protocol","severity":"critical","exploited":false,"published_at":"2026-08-27T20:17:41.423+00:00","url":"https://junglewise.ai/threats/cve-2026-37006-gpt-researcher-websocket-code-execution-via-model-context"},{"cve":"CVE-2026-5632","cvss":7.3,"epss":0.0041,"slug":"cve-2026-5632-assafelovic-gpt-researcher-missing-authentication-in-rest-api-and","title":"assafelovic gpt-researcher missing authentication in REST API and WebSockets","severity":"high","exploited":false,"published_at":"2026-04-06T07:16:02.197+00:00","url":"https://junglewise.ai/threats/cve-2026-5632-assafelovic-gpt-researcher-missing-authentication-in-rest-api-and"},{"cve":"CVE-2026-5631","cvss":7.3,"epss":0.0031,"slug":"cve-2026-5631-assafelovic-gpt-researcher-rce-in-websocket-endpoint","title":"assafelovic gpt-researcher RCE in WebSocket endpoint","severity":"high","exploited":false,"published_at":"2026-04-06T07:16:01.983+00:00","url":"https://junglewise.ai/threats/cve-2026-5631-assafelovic-gpt-researcher-rce-in-websocket-endpoint"},{"cve":"CVE-2026-5633","cvss":7.3,"epss":0.0028,"slug":"cve-2026-5633-assafelovic-gpt-researcher-ssrf-in-ws-endpoint","title":"assafelovic gpt-researcher SSRF in ws Endpoint","severity":"high","exploited":false,"published_at":"2026-04-06T08:16:39.487+00:00","url":"https://junglewise.ai/threats/cve-2026-5633-assafelovic-gpt-researcher-ssrf-in-ws-endpoint"},{"cve":"CVE-2026-5630","cvss":4.3,"epss":0.0034,"slug":"cve-2026-5630-assafelovic-gpt-researcher-xss-in-report-api","title":"assafelovic gpt-researcher XSS in Report API","severity":"medium","exploited":false,"published_at":"2026-04-06T07:16:01.757+00:00","url":"https://junglewise.ai/threats/cve-2026-5630-assafelovic-gpt-researcher-xss-in-report-api"},{"cve":"CVE-2026-5625","cvss":4.3,"epss":0.0029,"slug":"cve-2026-5625-assafelovic-gpt-researcher-xss-in-websocket-interface","title":"assafelovic gpt-researcher XSS in WebSocket Interface","severity":"medium","exploited":false,"published_at":"2026-04-06T06:16:21.86+00:00","url":"https://junglewise.ai/threats/cve-2026-5625-assafelovic-gpt-researcher-xss-in-websocket-interface"},{"cve":"CVE-2025-65720","cvss":8.8,"slug":"cve-2025-65720-assafelovic-gpt-researcher-command-injection-in-mcp-stdio","title":"assafelovic GPT Researcher command injection in MCP STDIO","severity":"info","exploited":false,"published_at":"2026-07-15T22:16:45.417+00:00","url":"https://junglewise.ai/threats/cve-2025-65720-assafelovic-gpt-researcher-command-injection-in-mcp-stdio"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}