EUVD-2025-210784
GHSA-gpwh-5jwg-6gc2
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Network-reachable file upload yielding RCE (C/I/A High); PR:L rather than PR:N because the per-user 'my_drive' endpoint most likely requires an authenticated account.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file.
AnalysisAI
Remote code execution in Cohere North AI v1.1.5 arises from an arbitrary file upload flaw in the /v1/my_drive/batch_upload endpoint, where insufficient validation of uploaded file type/content lets an attacker place a malicious file that the server subsequently executes. The affected component is part of Cohere's North enterprise AI knowledge platform, and successful exploitation yields full compromise of confidentiality, integrity, and availability. No public exploit is identified in the intelligence feeds, though a third-party technical write-up exists on GitHub; EPSS is low (0.15%, 5th percentile), indicating limited observed exploitation activity to date.
Technical ContextAI
This is a CWE-434 (Unrestricted Upload of File with Dangerous Type) weakness. The vulnerable path is the /v1/my_drive/batch_upload API of Cohere North, an enterprise generative-AI assistant and knowledge-management platform that ingests user documents into a personal 'drive.' Because batch upload accepts attacker-controlled files without adequately restricting extension, MIME type, or content, a crafted file (e.g., a server-side script or a payload interpreted by the backend runtime) can be written to a location where the application later executes it, converting a file-ingestion feature into arbitrary code execution. The single CPE provided (cpe:2.3:a:n/a:n/a:*) is a placeholder with no real vendor/product tokens, so affected-product enumeration must come from the description rather than the CPE.
RemediationAI
No vendor-released patch identified at time of analysis; no fixed version is present in the intelligence data, so contact Cohere for a fixed build of North beyond 1.1.5 and monitor http://cohere.com, http://north.com, and the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2025-61165) for an advisory. As compensating controls, restrict network access to the /v1/my_drive/batch_upload endpoint to trusted, authenticated users via a reverse proxy or WAF rule, and enforce strict server-side upload validation - allowlist permitted extensions and MIME types, store uploads outside any web or executable path, strip execute permissions, and rename files to non-executable names; the trade-off is that tightening or blocking batch_upload may break legitimate document-ingestion workflows, so validate against expected file types before deploying. Review upload directories and application logs for anomalous or executable files as a detective control.
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Remote code execution in the Exim mail transfer agent (versions before 4.99.3) built against certain GnuTLS configuratio
SQL injection in EasyAppointments <=1.5.1 allows unauthenticated attackers to extract and modify database contents via t
Unauthenticated remote OS command injection in MeiG Smart FORGE_SLT711 cellular gateway firmware MDM9607.LE.1.0-00110-ST
Unauthenticated API access in LalanaChami Pharmacy Management System (commit 5c3d028) allows remote attackers to dump al
Privilege escalation via broken access control in Citrix Cloud (through 2025-11-10) lets a user holding only read-only p
go-wind-cms (GoWind) before 1.0.0 exposes all administrative APIs to any authenticated user because NewAuthorizer() retu
Giflib 5.2.2 contains a buffer overflow in the EGifGCBToExtension function that fails to validate allocated memory when
Denial of service in GPAC's MP4Box multimedia tool (versions before 26.02.0) arises from a use-after-free in the gf_sei_
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today