PT-2025-52672

CVE-2025-63663

Published

2025-12-22

Updated

2026-11-11

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10

Description An access control issue exists in the /api/v1/conversations/*/files API of GT Edge AI Platform. This allows unauthorized access to files uploaded by other users. The vulnerable parameter is the file identifier within the API endpoint.

Recommendations Update GT Edge AI Platform to version 2.0.10 or later.

Exploitability

Fix

Impacts

Researchers

Peyton Kennedy

Richard Medlin

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers