SSRF in binary-husky/gpt_academic

The SSRF vulnerability in GPT Academic allows an attacker to craft malicious requests that the application will execute on its own behalf. Because the crazyutils.getfilesfromeverything() function is called without proper sanitization, an attacker can manipulate the request to target internal services or external resources that the application should not be accessing. This could lead to the exposure of sensitive data, unauthorized access to internal systems, or even the potential for further exploitation if the Gradio Web server has weak credentials. The blast radius extends to any resources accessible by the Gradio Web server, potentially impacting other applications or services running on the same infrastructure.

Organizations utilizing GPT Academic, particularly those deploying it in environments with sensitive data or internal services accessible through the Gradio Web server, are at risk. Those using older, unpatched versions of GPT Academic are especially vulnerable. Shared hosting environments where multiple users share the same GPT Academic instance could also be affected, potentially allowing one user to exploit the vulnerability to access resources belonging to other users.

• python / server:

import requests
import sys

def check_ssrf(url):
    try:
        response = requests.get(url, timeout=5, verify=False)
        print(f"[+] URL {url} returned status code: {response.status_code}")
        return True
    except requests.exceptions.RequestException as e:
        print(f"[-] URL {url} failed: {e}")
        return False

if __name__ == "__main__":
    if len(sys.argv) > 1:
        target_url = sys.argv[1]
        if check_ssrf(target_url):
            print("[!] SSRF vulnerability detected!")
        else:
            print("[+] SSRF vulnerability not detected.")
    else:
        print("Usage: python check_ssrf.py <target_url>")

1. 2025-03-20Disclosure

   disclosure

1. Reserviert2024-11-08
2. Veröffentlicht2025-03-20
3. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-11030 is to upgrade to a patched version of GPT Academic as soon as it becomes available. Until a patch is released, consider implementing temporary workarounds. These may include restricting network access to the Gradio Web server, implementing strict firewall rules to limit outbound connections, and carefully reviewing the configuration of the crazyutils.getfilesfromeverything() function to ensure it is not being misused. Monitor application logs for unusual outbound requests originating from the HotReload plugin. After upgrading, confirm the fix by attempting to trigger the SSRF vulnerability with a known malicious URL and verifying that the request is blocked.