PT-2025-52673 · Unknown · Gt Edge Ai Platform

Peyton Kennedy + 1 · Published 2025-12-22 · Updated 2026-01-05 · CVE-2025-63664

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev

Description An access control issue exists in the /api/v1/conversations/*/messages API of GT Edge AI Platform. This allows unauthorized access to message history with AI agents belonging to other users. The conversations and messages variables within the API endpoint are involved in this issue.

Recommendations Update to version 2.0.10-dev or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-63664

Affected Products

Gt Edge Ai Platform

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-63664 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63664 · Vendor Advisory
• https://github.com/p80n-sec/Vulnerability-Research/blob/main/Pending · Note
• https://twitter.com/CVEnew/status/2003198624801362091 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2003193634292646081 · Twitter Post
• https://gist.github.com/p80n-sec/0a0a71a2190d5e6f8083bf6069e7b5f2 · Note
• https://t.me/cveNotify/147734 · Telegram Post
• https://twitter.com/cracbot/status/2004869939937902909 · Twitter Post