Google Gemini for iOS: conversation disclosure
CVE-2025-5009
Public research by Warisjeet Singh sin99xx
Disclosed
The public finding
What was found.
Sharing a snippet created a public link that carried the entire conversation history, not the excerpt.
Sources and evidence.
The evidence: the NVD record, verbatim
nvd.nist.gov · CVE-2025-5009
published 2025
"In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet."