PT-2025-41274 · Google · Gemini Ios

Warisjeet Singh + 1 · Published 2025-10-08 · Updated 2025-10-11 · CVE-2025-5009

Positive Technologies (AI Summary)

CVSS v4.0

1.0

Low

Base vector

AV:A/AC:L/AT:P/PR:H/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Gemini iOS (affected versions not specified)

Description A flaw exists in Gemini iOS where sharing a conversation snippet inadvertently shares the entire conversation history through a publicly accessible link. This occurs because the sharing mechanism does not limit the content to the selected snippet, exposing the complete conversation to anyone with the link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-359

Related Identifiers

CVE-2025-5009

Affected Products

Gemini Ios

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-5009 · Security Note
• https://t.me/CVEtracker/34459 · Telegram Post
• https://twitter.com/CVEnew/status/1975977590872494564 · Twitter Post
• https://medium.com/@warisjeet31/google-gemini-ios-vulnerability-public-link-sharing-silently-leaks-entire-conversations-e1f80cbea25c · Note
• https://twitter.com/sin99xx/status/1976830862898741388 · Twitter Post