GT Edge AI Platform Insecure Permissions Vulnerability in Agents API Allowing Unauthorized Access to Sensitive Information

A vulnerability exists in the GT Edge AI Platform, specifically in the Community Edition, prior to version 2.0.12. The issue arises from insecure permissions in the /api/v1/agents API, which allows unauthorized attackers to access sensitive information. This vulnerability could lead to unauthorized information disclosure, including system prompts and confidential details about AI agents.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, including system prompts and other confidential data related to AI agents.