High severity7.5NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026

CVE-2025-63663

Description

Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GT Edge AI Platform/GT Edge AI Platformllm-create
Range: <2.0.10
Gtedge/Gt Edge AI
cpe:2.3:a:gtedge:gt_edge_ai:*:*:*:*:community:*:*:*
Range: <2.0.12
GT/GT Edge AI Platformcpe-rescue

Patches

Vulnerability mechanics

References

gist.github.com/p80n-sec/f3ca933480157cb4e18c387d92f4d0c2nvdThird Party Advisory
github.com/p80n-sec/Vulnerability-Research/blob/main/PendingnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000