CVE-2025-0744: Improper Access Control in EmbedAI
INCIBE reported that an Improper Access Control vulnerability (CVE-2025-0744) was discovered in EmbedAI, a chatbot creation tool, affecting versions prior to 2.1. The vulnerability was patched in version 2.1.
What happened
An Improper Access Control vulnerability (CVE-2025-0744) was discovered in EmbedAI, affecting versions prior to 2.1. The vulnerability allows an authenticated attacker to perform unauthorized actions through improper authorization controls.
Governance controls
The vulnerability was resolved by the EmbedAI team in version 2.1.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.