PT-2025-52672

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10 Description An access control issue exists in the /api/v1/conversations//files API of GT Edge AI Platform. This allows unauthorized access to files uploaded by other users. The vulnerable parameter ...

CVE-2025-63662

The GT Edge AI Platform is vulnerable to unauthorized access of sensitive information due to insecure permissions in the /api/v1/agents API. This flaw affects versions prior to v2.0.10-dev . Exploitation details are not provided in the documents. To remediate this vulnerability, users should upda...

CVE-2025-63664

The GT Edge AI Platform is vulnerable to an improper access control flaw in versions prior to v2.0.10-dev . This vulnerability exists within the /api/v1/conversations/*/messages API endpoint, specifically involving the conversations and messages variables. An unauthorized attacker can exploit thi...

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...