Gtedge vulnerabilities
Published CVEs affecting Gtedge products: 4 record(s), with severity, exploitation and fixes.
CVE-2025-63664
High · 7.5
CWE-284 Dec 22, 2025
Improper Access Control in Gtedge Gt Edge Ai
Incorrect access control in the /api/v1/conversations/*/messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents.
CVE-2025-63663
High · 7.5
CWE-284 Dec 22, 2025
Improper Access Control in Gtedge Gt Edge Ai
Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files.
CVE-2025-63662
High · 7.5
CWE-200 Dec 22, 2025
Exposure of Sensitive Information in Gtedge Gt Edge Ai
Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information.
CVE-2025-63665
Critical · 9.8
CWE-94 Dec 19, 2025
Code Injection in Gtedge Gt Edge Ai
An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window.