An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter
Date: 2025-09
Attack vector: info-disclosure
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2025-50708
CVE-2025-50709
CWE: CWE-200
CWE-598
CVSS: 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter


Mitigations:

Architectural layers (MAESTRO):