CVE-2025-0742

Summary

CVE-2025-0742 is an Improper Access Control vulnerability affecting EmbedAI versions 2.1 and below. This issue enables authenticated attackers to breach access controls and gain unauthorized access to files belonging to other users. By manipulating the "FILE_ID" parameter in the endpoint "/embedai/files/show/<FILE_ID>," attackers can obtain files that were not intended for their access. This vulnerability poses a significant risk to data privacy and security within EmbedAI environments.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.