CVE-2025-0745

Summary

CVE-2025-0745 is an Improper Access Control vulnerability affecting EmbedAI 2.1 and earlier versions. This issue grants authenticated attackers the ability to access the database backups by making a request to the "/embedai/app/uploads/database/<SQL_FILE>" endpoint. Successful exploitation could potentially result in data exposure or unauthorized access to sensitive information. Users are strongly advised to update their EmbedAI installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.