Prompt-injection RCE via manim plugin in gpt_academic (CVE-2024-10954)
Date: 2024
Affected: binary-husky/gpt_academic (manim plugin)
Attack vector: prompt-injection
Category: vulnerability-disclosure
Severity: Critical

The manim plugin in binary-husky/gpt_academic allows prompt-injection-based remote code execution by injecting malicious code through the prompt.


Mitigations:

Architectural layers (MAESTRO):