hacKicker

Google Gemini for iOS · Information disclosure

Google Gemini for iOS: conversation disclosure

Identifier CVE-2025-5009

Disclosed

Status Confirmed ✓

Credit Warisjeet Singh

Sharing a snippet created a public link that carried the entire conversation history, not the excerpt.

Exhibit 01The evidence: the NVD record, verbatim
nvd.nist.gov · CVE-2025-5009published 2025
"In Gemini iOS, when a user shared a snippet of a conversation,
it would share the entire conversation via a sharable public link
that contained the entire conversation history and not just
the snippet."