Vulnerabilidades de Gtedge
CVEs publicadas que afetam produtos de Gtedge: 4 registro(s), com severidade, exploração e correções.
CVE-2025-63664
Alta · 7.5
CWE-284 22/12/2025
Improper Access Control em Gtedge Gt Edge Ai
Incorrect access control in the /api/v1/conversations/*/messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents.
CVE-2025-63663
Alta · 7.5
CWE-284 22/12/2025
Improper Access Control em Gtedge Gt Edge Ai
Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files.
CVE-2025-63662
Alta · 7.5
CWE-200 22/12/2025
Exposure of Sensitive Information em Gtedge Gt Edge Ai
Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information.
CVE-2025-63665
Crítica · 9.8
CWE-94 19/12/2025
Code Injection em Gtedge Gt Edge Ai
An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window.