{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.14.5","last_affected":"0.14.7"}],"component":"gpt-researcher","cve_ids":["CVE-2025-65720"],"ecosystem":"PyPI","epss":0.00722,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8j86-h8gg-797p","id":"tcs_01M5KF8E2WCAW6TZAPK8ZM892W","modified_at":"2026-10-15T14:55:46.566578398Z","published_at":"2026-07-16T00:31:33Z","references":["https://osv.dev/vulnerability/GHSA-8j86-h8gg-797p","https://nvd.nist.gov/vuln/detail/CVE-2025-65720","https://github.com/assafelovic/gpt-researcher","https://www.ox.security/blog/gpt-researcher-remote-code-execution","https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8j86-h8gg-797p","url":"https://osv.dev/vulnerability/GHSA-8j86-h8gg-797p"}],"summary":"GPT Researcher MCP STDIO configuration allows remote command execution"}