PT-2025-30423 · Unknown · Ai2 Playground Web Service

Published 2025-07-22 · Updated 2025-07-22 · CVE-2025-51865

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ai2 playground web service versions prior to 2025-06-04

Description The Ai2 playground web service is susceptible to an Insecure Direct Object Reference (IDOR) issue. This allows attackers to access sensitive information by enumerating thread keys within the URL.

Recommendations Versions prior to 2025-06-04 should be updated. Consider implementing stricter access controls to prevent unauthorized access to thread keys.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-51865

Affected Products

Ai2 Playground Web Service

References · 5

• 🔥 https://github.com/Secsys-FDU/CVE-2025-51865 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51865 · Security Note
• https://t.me/CVEtracker/28384 · Telegram Post
• https://t.me/cvetracker/28384 · Telegram Post
• https://twitter.com/CVEnew/status/1947677519131341078 · Twitter Post