CVE-2025-65720

CriticalCVSS 9.8

Published: 15/07/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.72%

50th percentile - higher than 50% of all known CVEs

Summary

An issue in GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.

Risk Assessment

The risk for the organization includes full compromise of the victim system, potentially leading to data theft, malware installation, or further propagation of the attack within the network.

Recommendation

Immediately update GPT Researcher to the latest version that fixes this vulnerability. Until updated, avoid opening suspicious HTML pages in environments running the vulnerable version.

Original NVD description (English source)

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.