CVE-2025-51869

The AI search engine Liner is vulnerable to an Insecure Direct Object Reference (IDOR) in its chat component, affecting versions through 2025-06-03 . The root cause is the server's failure to validate ownership or sharing status for conversation histories; it only verifies the message_id when a u...