VulnSocial

CVE-2026-25338Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.7.4.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-02-24); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-02-19: 1Mentions · 2026-02-24: 2Mentions · 2026-03-10: 1Technical Details · 2026-02-19: 1Technical Details · 2026-02-24: 1Technical Details · 2026-03-10: 102-1902-2403-10
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-02-191
Disclosure1
2026-02-242
General2
2026-03-101
Disclosure1
Full discourse4 posts
  • Prateek Tomar@TomarPrateek23
    General

    Security deep dive: Critical Analysis CVE-2026-25338 - Missing Authorization vulnerability in.... Actionable advice for practitioners. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-25338-missing-authorization-vulnerability-in-ays-pro-ai-chatbot-wi-februa #Cy

    Post summary

    The post references CVE‑2026‑25338, noting a missing authorization flaw, but offers no PoC, exploit code, or patch details.

    0001148
    80 followersView on X
  • Prateek Tomar@Prateektomar
    Disclosure

    Just published: Critical Analysis CVE-2026-25338 - Missing Authorization vulnerability in.... Practical security guidance from the trenches. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-25338-missing-authorization-vulnerability-in-ays-pro-ai-chatbot-wi-march

    Post summary

    A blog post announcing a critical analysis of CVE‑2026‑25338 focuses on a missing‑authorization flaw, but offers no PoC, exploit, patch, or evidence of active exploitation.

    0000049
    91 followersView on X
  • Prateek Tomar@TomarPrateek23
    General

    Just published: Critical Analysis CVE-2026-25338 - Missing Authorization vulnerability in.... Practical security guidance from the trenches. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-25338-missing-authorization-vulnerability-in-ays-pro-ai-chatbot-wi-febru

    Post summary

    A blog post announces a critical analysis of CVE‑2026‑25338, but provides no concrete details on exploitation, patches, or technical specifics.

    0000031
    80 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-25338 Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Exploiting Incorrectly Configured Acc… https://www.cve.org/CVERecord?id=CVE-2026-25338

    Post summary

    CVE-2026-25338 describes a missing authorization flaw in Ays Pro AI ChatBot that permits exploitation via incorrectly configured access, but no PoC, exploit code, patch, or active exploitation evidence is cited.

    0000095
    56.4K followersView on X

Explore more

Back to dashboard