CVE-2026-73032: PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM interception of API requests, or a malicious custom LLM endpoint to execute arbitrary code in Zotero's chrome-privileged context, enabling file read/write, process execution, and access to all Zotero data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PapersGPT for Zoteroto a version that resolves this vulnerability.Fixed in 0.6.1 - Configuration
Remove/disable the use of unsanitized LLM response handling that passes attacker-controlled content to window.eval() in views.ts (avoid eval of LLM output).
PapersGPT for Zotero (views.ts) window.eval() = disabled - Compensating control
Ensure any custom/malicious LLM endpoint used by PapersGPT for Zotero is blocked or replaced, since the RCE occurs when attacker-controlled JavaScript is returned by an LLM endpoint and then executed in Zotero's chrome-privileged context.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73032?
CVE-2026-73032 is classified as critical with a severity score of 9.6.
How do I fix CVE-2026-73032?
To fix CVE-2026-73032, update to the latest version of PapersGPT for Zotero that addresses the remote code execution vulnerability.
What type of vulnerability is CVE-2026-73032?
CVE-2026-73032 is a remote code execution vulnerability due to code injection in the PapersGPT for Zotero application.
What are the potential impacts of exploiting CVE-2026-73032?
Exploiting CVE-2026-73032 could allow attackers to execute arbitrary JavaScript code, leading to full compromise of the user's system.
Which software is affected by CVE-2026-73032?
CVE-2026-73032 affects the PapersGPT for Zotero version 0.6.1.