CVE-2025-5009CWE-359

CVE-2025-5009

published October 8, 2025

CVSS
1.0
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet.

The record
Technical detail
CVSS
1.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00124 · 1.9th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2025-10-08T20:15Z
References (1)
https://medium.com/@warisjeet31/google-gemini-ios-vulnerability-public-link-sharing-silently-leaks-entire-conversations-e1f80cbea25c · [email protected]
EPSS history
Timeline
  • 08 OCT 15:31Z
    Information Disclosure in Gemini iOS App
    cvelistv5