CyberRota Analysis
AI-GeneratedPapersGPT for Zotero version 0.6.1 is vulnerable to a critical remote code execution flaw that allows attackers to execute arbitrary JavaScript via unsanitized input from a malicious LLM endpoint. This exploitation can occur through prompt injection in PDFs, MITM interception of API requests, or by leveraging a custom LLM endpoint, granting attackers extensive access to Zotero's chrome-privileged context, including file read/write capabilities and access to all user data. Organizations using this software should prioritize patching to mitigate the risk of severe data breaches and unauthorized system access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM interception of API requests, or a malicious custom LLM endpoint to execute arbitrary code in Zotero's chrome-privileged context, enabling file read/write, process execution, and access to all Zotero data.