CVE-2025-0739
Published: 30 January 2025
Description
Adversaries may attempt to get a listing of cloud accounts.
Security Summary
CVE-2025-0739 is an Improper Access Control vulnerability (CWE-284) affecting EmbedAI version 2.1 and below. The issue resides in the endpoint "/demos/embedai/subscriptions/show/<SUSCBRIPTION_ID>", where insufficient controls allow manipulation of the SUSCBRIPTION_ID parameter. It has a CVSS v3.1 base score of 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), indicating high severity due to network accessibility, low attack complexity, no required privileges or user interaction, and changed scope with high confidentiality impact.
An authenticated attacker can exploit this vulnerability by altering the SUSCBRIPTION_ID parameter in the specified endpoint to access and view subscription information belonging to other users. This enables unauthorized exposure of sensitive subscription details without impacting integrity or availability.
The primary advisory is published by INCIBE-CERT, detailing multiple vulnerabilities in EmbedAI, including this issue, available at https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai. Practitioners should consult this notice for additional context and recommended mitigations.
Details
- CWE(s)
Affected Products
AI Security Analysis
- AI Category
- Enterprise AI Assistants
- Risk Domain
- Privacy and Disclosure
- OWASP Top 10 for LLMs 2025
- None mapped
- MITRE ATLAS Techniques
- None mapped
- Classification Reason
- EmbedAI is a tool for creating chatbots, explicitly tagged with 'Artificial intelligence' in the advisory, and provides features like embedding AI chatbots with subscriptions, chats, and files, aligning with Enterprise AI Assistants platforms.
MITRE ATT&CK Enterprise Techniques
Why these techniques?
CVE-2025-0739 is an improper access control (IDOR) vulnerability in a public-facing web application, enabling exploitation for initial access or post-auth data disclosure (T1190). It facilitates cloud account discovery (T1087.004) by allowing manipulation of the subscription ID parameter to access other users' subscription information.