Gemini iOS CVE-2025-5009
LOWAttack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessUser shares conversation snippet
-
ExploitApp generates public link exposing full history
-
ExecutionRecipient opens link
-
ImpactEntire conversation disclosed
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V14 - Data Protection PII protection
|
| Exploitation Conditions | The leak triggers specifically when a user invokes the snippet/conversation-sharing feature in the Gemini iOS app: the resulting sharable public link embeds the full conversation history rather than only the selected snippet. Exploitation is strictly limited by the requirement that the authenticated account owner must voluntarily create and distribute a share link - there is no way for an outside attacker to force disclosure. Realized exposure further depends on the public link being obtained by an unintended party (forwarded, posted, guessed, or indexed). It affects the iOS client's sharing workflow; default behavior leaks more than the user intends, but only for conversations the user chose to share. |
| Impact | This is a genuinely low-priority issue by every available signal, and the signals are consistent rather than conflicting. The vendor-supplied CVSS 4.0 base score is 1.0 (lowest tier), with only low confidentiality impact (VC:L) and no integrity or availability impact. EPSS is 0.12% (2nd percentile), indicating negligible likelihood of mass exploitation. The CVE is not listed in CISA KEV and no public exploit code is referenced - no public exploit identified at time of analysis. CWE-359 (privacy/exposure of personal information) matches the described behavior. The practical risk is unauthorized disclosure of a user's own Gemini conversation history to recipients of a share link, not a classic attacker-driven compromise; there is no code execution, privilege escalation, or system takeover. One caveat worth verifying: the vendor vector sets AV:A (adjacent) and AT:P (present attack requirement), which is unusual for a public-link disclosure that is reachable over the open internet - the exposure channel (a public URL) suggests a network vector, so the adjacency/attack-requirement framing should be confirmed with the vendor. Overall this is a high-noise/low-impact privacy defect, not an urgent patching priority. |
| Exploit ScenarioDerived | A Gemini iOS user selects a single snippet of a conversation to share and generates what they believe is a limited, public link. Instead, anyone who receives or discovers that link can view the user's entire conversation history, not just the intended excerpt, exposing potentially sensitive prompts and responses. No public exploit code is required - the leak occurs through normal use of the built-in sharing feature. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 08, 2026
Information disclosure in Gemini iOS occurs when the app's conversation-sharing feature creates a public link that includes the entire chat history instead of only the snippet the user selected. The issue affects users of the Google Gemini iOS client and requires the authenticated account owner to voluntarily initiate sharing and distribute the resulting link; realized exposure then depends on that public link reaching an unintended recipient through forwarding, indexing, or guessing. No public exploit code was identified and EPSS is 0.12% (2nd percentile), so this is a low-priority privacy weakness rather than an actively exploited remote compromise.
RemediationAI
No vendor-released patch identified at time of analysis. Users and administrators should update the Gemini iOS app to the latest available version and retest snippet-sharing behavior, since a fix may be delivered silently through the App Store. Until a fix is confirmed, avoid using Gemini iOS's snippet/conversation-sharing feature; instead copy only the intended text into a new message or document, at the cost of manual effort and possible loss of formatting. Review and revoke any existing Gemini public share links, especially those created from snippets, because once a public link is indexed or forwarded it may remain accessible to unintended parties. If the app is managed by an organization, consider restricting or blocking the Gemini iOS app via MDM until the sharing behavior is corrected, but this prevents all legitimate Gemini mobile use and may not be practical. The public report is at https://medium.com/@warisjeet31/google-gemini-ios-vulnerability-public-link-sharing-silently-leaks-entire-conversations-e1f80cbea25c.
Affected ProductsAI
Google Gemini for iOS is the affected product. No CPE strings or exact version ranges were supplied in the available data, so the exposure applies to Gemini iOS builds that include the snippet-sharing workflow described in the public report at https://medium.com/@warisjeet31/google-gemini-ios-vulnerability-public-link-sharing-silently-leaks-entire-conversations-e1f80cbea25c. The independent assessment scores the issue as CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N, reflecting that a low-privileged authenticated user must interact with the sharing feature for the over-disclosure to occur.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause is CWE-359, Exposure of Private Personal Information to an Unauthorized Actor, in the Gemini iOS client's sharing workflow. When a user chooses to share a snippet, the app appears to serialize or include the full conversation context in the generated sharable public link rather than scoping the shared object to only the selected excerpt. The resulting public link is unauthenticated by design once created, so anyone with the URL can view the over-shared history until the link is revoked or expires. No CPE identifiers or exact affected version ranges were provided; the vulnerable component is specifically the Google Gemini iOS application's snippet/conversation share-link generation, not the Gemini web or Android clients as far as available data shows.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Authenticated account owner must initiate the share (PR:L, UI:R); public link is reachable over the network (AV:N); only conversation text is disclosed across a trust boundary (S:C, C:L), with no integrity or availability impact.
Primary rating from Vendor (google).
CVSS VectorVendor: google
DescriptionCVE.org
In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
GitHub PoC
Exploit-DB