The vulnerability CVE-2025-31564 is an SQL Injection issue in the aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One product, affecting versions up to 2.2.6. It arises from improper neutralization of special elements in SQL commands, allowing blind SQL injection attacks. The CVSS 3.1 base score is 8.5, indicating high severity, with network attack vector, low attack complexity, requiring low privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with low privileges can exploit this vulnerability remotely without user interaction to perform blind SQL injection attacks. This can lead to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). There is no reported impact on data integrity. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for unusual activity related to SQL injection attempts. Avoid exposing the vulnerable service to untrusted networks if possible.