HighVulnerabilityLLM-specific
CVE-2025-62039: Ays Pro AI ChatBot with ChatGPT and Content Generator sensitive data exposure
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-62039
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.3%
Summary
CVE-2025-62039 is an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201) in the AI ChatBot with ChatGPT and Content Generator by AYS plugin, slug ays-chatgpt-assistant. It affects versions from n/a through 2.6.6 and allows retrieval of embedded sensitive data. NVD had not yet provided an assessment, and the record was published 11/06/2025 by Patchstack.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-121938: langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability that allows authenticated…Similar attack · NVD/CVE Database
- InfoResidual Attribute Leakage Is an Interface: Auditing Privacy Evaluation After Text De-identificationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- MediumHundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake FeaturesSimilar attack · Wired (Security)
- MediumNew VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial ValueSimilar attack · The Hacker News
- InfoAccessed, never disclosed: Silent access to protected health information by medical artificial intelligence agentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)