Product:
Gemini iOS
Summary
In Gemini iOS, when a user shared a snippet of a conversation, it would inadvertently share the entire conversation via a public link. This link contained the complete conversation history instead of just the intended snippet, leading to potential privacy breaches.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 1 | CVE-2025-5009 |
Exploitation
An attacker can exploit this vulnerability by tricking a user into sharing a snippet of a conversation. When the user shares the snippet, the entire conversation history is exposed through a public link. This can be done by sending a link to the user and encouraging them to share it, thereby revealing sensitive information.
Affected Products
- Gemini iOS: Vulnerable to sharing entire conversation history through public links when only a snippet is intended to be shared.
Mitigation
To mitigate this vulnerability, users should be cautious when sharing snippets of conversations and ensure they are aware of what information is being shared. Developers should implement stricter controls on shared content to prevent the exposure of entire conversation histories.