Richard Medlin

An issue exists within Windows NTLM that allows for external control of file names or paths. This can enable an unauthorized attacker to perform spoofing over a network.

The /api/v1/agents API in GT Edge AI Platform has insecure permissions, potentially allowing unauthorized access to sensitive information. The API endpoint ''/api/v1/agents'' is affected.

An access control issue exists in the `/api/v1/conversations/*/files` API of GT Edge AI Platform. This allows unauthorized access to files uploaded by other users. The vulnerable parameter is the file identifier within the API endpoint.

An access control issue exists in the `/api/v1/conversations/*/messages` API of GT Edge AI Platform. This allows unauthorized access to message history with AI agents belonging to other users. The `conversations` and `messages` variables within the API endpoint are involved in this issue.

An issue in GT Edge AI Platform allows attackers to execute arbitrary code by injecting a crafted JSON payload into the Prompt window. The vulnerability involves the potential for code execution through manipulation of the input provided to the application.