Project AI — Vulnerability (CVE-2025-48491)
Date: 2025-05
Attack vector: auth-bypass
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2025-48491
CWE: CWE-798

Project AI is a platform designed to create AI agents. Prior to the pre-beta version, a hardcoded API key was present in the source code. This issue has been patched in the pre-beta version.


Mitigations:

Architectural layers (MAESTRO):