PT-2025-52673

CVE-2025-63664

Published

2025-12-22

Updated

2026-01-05

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev

Description An access control issue exists in the /api/v1/conversations/*/messages API of GT Edge AI Platform. This allows unauthorized access to message history with AI agents belonging to other users. The conversations and messages variables within the API endpoint are involved in this issue.

Recommendations Update to version 2.0.10-dev or later.

Exploitability

Fix

Impacts

Researchers

Peyton Kennedy

Richard Medlin

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers