Project AI is a platform designed to create AI agents. Prior to the pre-beta version, a hardcoded API key was present in the source code. This issue has been patched in the pre-beta version.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00148.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-16445 Project AI is a platform designed to create AI agents. Prior to the pre-beta version, a hardcoded API key was present in the source code. This issue has been patched in the pre-beta version.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://github.com/aryan6673/project-ai/commit/142252c43f1dacb3fed99e3336f5cd863b028bc2 cve-icon cve-icon
https://github.com/aryan6673/project-ai/commit/1de910f353eb2a68c980149b906e7495459296ad cve-icon cve-icon
https://github.com/aryan6673/project-ai/commit/54a69c3ccd301d35f3d54f4844d9910e609beb73 cve-icon cve-icon
https://github.com/aryan6673/project-ai/commit/7f3b93f9aa9085d5413b4019172b0e56676346d7 cve-icon cve-icon
https://github.com/aryan6673/project-ai/commit/8db90e3d9777850741804533ebde5824b4a5795c cve-icon cve-icon
https://github.com/aryan6673/project-ai/commit/99e0e0718edb0e59c5d3c5a69903b87c69fcfe7a cve-icon cve-icon
https://github.com/aryan6673/project-ai/commit/ab67979a46b0e343dc20a95a2b65d3c4994c31e7 cve-icon cve-icon
https://github.com/aryan6673/project-ai/commit/c1fb156418d98a1e6c60bb680db57e9558785093 cve-icon cve-icon
https://github.com/aryan6673/project-ai/security/advisories/GHSA-8486-vrcp-69rv cve-icon cve-icon
History

Fri, 30 May 2025 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 30 May 2025 04:00:00 +0000

Type Values Removed Values Added
Description Project AI is a platform designed to create AI agents. Prior to the pre-beta version, a hardcoded API key was present in the source code. This issue has been patched in the pre-beta version.
Title Project AI API Key Exposure in Source Code
Weaknesses CWE-798
References
Metrics cvssV4_0

{'score': 2.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U'}
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-05-30T12:42:33.795Z

Reserved: 2025-05-22T12:11:39.120Z

Link: CVE-2025-48491

cve-icon Vulnrichment

Updated: 2025-05-30T12:42:30.363Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-05-30T04:15:54.470

Modified: 2025-05-30T16:31:03.107

Link: CVE-2025-48491

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.