# CVE-2025-11749: AI Engine - Information Disclosure

> Live exploitation tracking for CVE-2025-11749 by the CrowdSec Live Exploit Tracker, built from real-world attack data crowdsourced from CrowdSec's global network.

Page: https://tracker.crowdsec.net/cves/CVE-2025-11749

## Key facts

- **Exploitation phase:** Limited Exploitation. The vulnerability is known but shows very limited attacker interest or exploitation activity.
- **CVSS score:** 9.8
- **Public exploit available:** Yes
- **Affected products:** Tigroumeow AI Engine
- **Weaknesses:** CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
- **Tags:** ai_mcp

## Description

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for unauthenticated attackers to extract the bearer token, which can be used to gain access to a valid session and perform many actions like creating a new administrator account, leading to privilege escalation.

## CrowdSec analysis

[CVE-2025-11749](https://euvd.enisa.europa.eu/vulnerability/CVE-2025-11749) is a critical vulnerability in the AI Engine WordPress plugin that exposes sensitive bearer tokens through the /mcp/v1/ REST API endpoint when 'No-Auth URL' is enabled. This flaw allows unauthenticated attackers to extract valid session tokens, potentially leading to privilege escalation, such as creating new administrator accounts and taking full control of the affected WordPress site.

CrowdSec has been tracking this vulnerability and its exploits since 26th of November 2025.

CrowdSec network observations suggest that most exploitation of CVE-2025-11749 involves focused reconnaissance to identify viable targets. Attackers typically tailor their campaigns based on system exposure and configuration. It is unlikely that a given attack is accidental.
In addition, according to the CrowdSec network, attack volume against CVE-2025-11749 has dipped slightly compared to the previous week. Although still commonly targeted, the decline suggests a cooling-off period. Long-term relevance remains, but attention is waning.

Attackers exploit unauthenticated requests to the `/wp-json/mcp/v1` REST API endpoint, which exposes sensitive bearer tokens and related information when the No-Auth URL feature is enabled in the AI Engine WordPress plugin.

## Timeline

- 2025-11-05: CVE Published. CVE-2025-11749 is published to NVD.
- 2025-11-26: Rule Released. CrowdSec releases a rule to detect CVE-2025-11749 exploitation attempts against the CrowdSec Network.
- 2025-11-27: CrowdSec First Seen. CrowdSec observes in-the-wild exploitation of CVE-2025-11749 for the first time.

## References

- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11749.yaml

## Live exploitation data

The [Live Exploit Tracker page](https://tracker.crowdsec.net/cves/CVE-2025-11749) follows observed exploitation activity for CVE-2025-11749. [Request an API key](https://tracker.crowdsec.net/request-api-key) for full access to its exploitation timeline, attacking IP addresses and blocklists.