CNNVD-202512-3955 Information

CNNVD ID

CNNVD-202512-3955

CVE-2025-63664

  • CNNVD Published: 2025-12-22

Description (Chinese)

GT Edge AI是美国GT Edge AI公司的一个边缘人工智能解决方案。 GT Edge AI v2.0.10-dev之前版本存在安全漏洞,该漏洞源于/api/v1/conversations/*/messages API访问控制不当,可能导致未授权访问其他用户消息历史。

Description (English)

GT Edge AI is a peripheral artificial intelligence solution for GT Edge AI. There was a security loophole in the previous version of GT Edge AI v2.0.10-dev, which stemmed from inadequate access controls/api/v1/conversions/*/messages API, which could lead to unauthorized access to other user information history.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

GT Edge AI

Published

2025-12-22

Last Modified

2026-02-24

References

https://gist.github.com/p80n-sec/0a0a71a2190d5e6f8083bf6069e7b5f2 https://github.com/p80n-sec/Vulnerability-Research/blob/main/Pending https://access.redhat.com/security/cve/cve-2025-63664

Share on: