CVE-2026-73032

Received Received - Intake

Remote Code Execution in PapersGPT for Zotero

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: VulnCheck

Description

PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM interception of API requests, or a malicious custom LLM endpoint to execute arbitrary code in Zotero's chrome-privileged context, enabling file read/write, process execution, and access to all Zotero data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-11

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-73032

EUVD

EUVD-2026-56896

Affected Vendors & Products

Vendor	Product	Version / Range
papersgpt	papersgpt_for_zotero	to 0.6.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This vulnerability is a remote code execution flaw in PapersGPT for Zotero version 0.6.1. It occurs because unsanitized responses from a large language model (LLM) are passed directly to JavaScript's eval() function in the views.ts file. Attackers can inject malicious JavaScript through prompt injection in PDFs, man-in-the-middle attacks on API requests, or a malicious custom LLM endpoint. This allows arbitrary code execution within Zotero's privileged chrome context, enabling file read/write, process execution, and access to all Zotero data.

Detection Guidance

Detecting this vulnerability requires checking for the use of PapersGPT for Zotero version 0.6.1 or earlier. Inspect the plugin's code for unsanitized LLM responses passed to window.eval() in views.ts or execTag function. Look for malicious JavaScript execution attempts in logs or network traffic involving PDFs or API requests.

Impact Analysis

If exploited, this vulnerability could allow attackers to execute arbitrary code on your system with the same privileges as Zotero. This means they could read, modify, or delete your files, install malware, or access sensitive data stored in Zotero. The attack could happen invisibly, as normal prose responses might not trigger obvious errors.

Compliance Impact

This vulnerability could significantly impact compliance with GDPR and HIPAA due to its potential to expose sensitive data. The remote code execution allows attackers to read, write, or modify all Zotero data, which may include personally identifiable information or protected health information. Unauthorized access to such data violates GDPR's data protection principles and HIPAA's confidentiality requirements.

Mitigation Strategies

Immediately update PapersGPT for Zotero to the latest version to apply the patch that removes window.eval() usage. Disable the plugin if an update is unavailable. Monitor for suspicious activity like unauthorized file access or process execution. Avoid using untrusted PDFs or custom LLM endpoints until patched.

Hi! I’m here to help you understand CVE-2026-73032. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70