CVE-2026-73032

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-73032
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73032.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-73032
Published
2026-08-11T19:19:02.285Z
Modified
2026-08-13T04:03:01.954884535Z
Severity
  • 9.4 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator
Summary
PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()
Details

PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM interception of API requests, or a malicious custom LLM endpoint to execute arbitrary code in Zotero's chrome-privileged context, enabling file read/write, process execution, and access to all Zotero data.

Database specific 
{
    "cwe_ids": [
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73032.json",
    "cna_assigner": "VulnCheck"
}
References

Affected packages

Git / github.com/papersgpt/papersgpt-for-zotero

Affected ranges

Type
GIT
Repo
https://github.com/papersgpt/papersgpt-for-zotero
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
094134172ce4a344a31e4b196cc75d1806383658
Database specific
Show details 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6.1"
        }
    ]
}

Affected versions

papersgpt-v0.*
papersgpt-v0.0.1
papersgpt-v0.0.10
papersgpt-v0.0.11
papersgpt-v0.0.12
papersgpt-v0.0.14
papersgpt-v0.0.15
papersgpt-v0.0.16
papersgpt-v0.0.17
papersgpt-v0.0.18
papersgpt-v0.0.19
papersgpt-v0.0.2
papersgpt-v0.0.20
papersgpt-v0.0.3
papersgpt-v0.0.4
papersgpt-v0.0.5
papersgpt-v0.0.6
papersgpt-v0.0.7
papersgpt-v0.0.8
papersgpt-v0.0.9
papersgpt-v0.1.0
papersgpt-v0.1.1
papersgpt-v0.1.2
papersgpt-v0.1.3
papersgpt-v0.2.0
papersgpt-v0.2.1
papersgpt-v0.2.2
papersgpt-v0.2.3
papersgpt-v0.2.4
papersgpt-v0.2.5
papersgpt-v0.3.0
papersgpt-v0.3.1
papersgpt-v0.3.2
papersgpt-v0.3.3
papersgpt-v0.3.4
papersgpt-v0.3.5
papersgpt-v0.3.6
papersgpt-v0.3.7
papersgpt-v0.3.8
papersgpt-v0.3.9
papersgpt-v0.4.0
papersgpt-v0.4.1
papersgpt-v0.4.2
papersgpt-v0.4.3
papersgpt-v0.4.4
papersgpt-v0.4.5
papersgpt-v0.4.6
papersgpt-v0.4.7
papersgpt-v0.4.8
papersgpt-v0.4.9
papersgpt-v0.5.0
papersgpt-v0.5.1
papersgpt-v0.5.2
papersgpt-v0.5.3
papersgpt-v0.5.4
papersgpt-v0.5.5
papersgpt-v0.6.0
papersgpt-v0.6.1
papersgpt-v1.*
papersgpt-v1.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73032.json"