Richard Medlin

**Name of the Vulnerable Software and Affected Versions** Windows NTLM (affected versions not specified) **Description** An issue exists within Windows NTLM that allows for external control of file names or paths. This can enable an unauthorized attacker to perform spoofing over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GT Edge AI Platform versions prior to 2.0.10-dev **Description** The /api/v1/agents API in GT Edge AI Platform has insecure permissions, potentially allowing unauthorized access to sensitive information. The API endpoint ''/api/v1/agents'' is affected. **Recommendations** Update GT Edge AI Platform to version 2.0.10-dev or later.

**Name of the Vulnerable Software and Affected Versions** GT Edge AI Platform versions prior to 2.0.10 **Description** An access control issue exists in the `/api/v1/conversations/*/files` API of GT Edge AI Platform. This allows unauthorized access to files uploaded by other users. The vulnerable parameter is the file identifier within the API endpoint. **Recommendations** Update GT Edge AI Platform to version 2.0.10 or later.

**Name of the Vulnerable Software and Affected Versions** GT Edge AI Platform versions prior to 2.0.10-dev **Description** An access control issue exists in the `/api/v1/conversations/*/messages` API of GT Edge AI Platform. This allows unauthorized access to message history with AI agents belonging to other users. The `conversations` and `messages` variables within the API endpoint are involved in this issue. **Recommendations** Update to version 2.0.10-dev or later.

**Name of the Vulnerable Software and Affected Versions** GT Edge AI Platform versions prior to 2.0.10-dev **Description** An issue in GT Edge AI Platform allows attackers to execute arbitrary code by injecting a crafted JSON payload into the Prompt window. The vulnerability involves the potential for code execution through manipulation of the input provided to the application. **Recommendations** Update GT Edge AI Platform to version 2.0.10-dev or later.