CVE-2026-37006 — n/a / n/a

Description (CNA)

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

http://gpt-researcher.com
https://yerangamage.com/cves/detail/?slug=gptresearcher-websocket-rce

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.