EUVD-2026-85508
GHSA-xj3r-7j9q-cqf2
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Authenticated user (PR:L) over network reads other users' conversation data (C:L), can rename/overwrite (I:L), and can permanently delete conversations (A:L); scope unchanged.
Primary rating from Vendor (certcc).
CVSS VectorVendor: certcc
Lifecycle Timeline
3DescriptionCVE.org
Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in libs/ktem/ktem/pages/chat/control.py that load a Conversation record by its ID without comparing the requester's user_id to the conversation's owner Conversation.user. This allows any authenticated user to perform the following actions:
- Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.
- Permanently delete another user's conversation.
- Rename another user's conversation.
- Overwrite another user's conversation's chat suggestion list.
AnalysisAI
Broken access control in Cinnamon's Kotaemon (all versions up to and including v0.12.0) allows any authenticated user on a shared, multi-user deployment to read, rename, delete, or overwrite the chat suggestion list of another user's conversations simply by supplying a victim's conversation ID, because four handler methods in libs/ktem/ktem/pages/chat/control.py load Conversation records without comparing the requester's user_id to Conversation.user. Exploitation requires a valid account on a multi-user instance where tenants share the same conversation store, needs no victim interaction, and is limited to accounts that can supply or enumerate valid conversation IDs (independent assessment: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, a moderate-priority broken-access-control/IDOR issue). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated account on a Kotaemon deployment running in multi-user mode (the vulnerability is specific to the multi-user chat interface where multiple tenants share conversations). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine but moderate-priority issue best characterized as a broken-access-control/IDOR flaw rather than a critical exposure. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch identified at time of analysis: the authoritative CERT/CC advisory is VU#754548 at https://kb.cert.org/vuls/id/754548 (mirrored at https://www.kb.cert.org/vuls/id/754548), and it should be monitored for a fixed Kotaemon release beyond v0.12.0, since every version through 0.12.0 is affected and simply upgrading within that range does not remove the flaw. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Remote code execution in kotaemon (Cinnamon) versions through 0.12.0 allows unauthenticated attackers to run arbitrary c
An issue was discovered in Cinnamon kotaemon 0.11.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely ex
Broken access control in Kotaemon through 0.12.0 lets any user act on conversations they do not own by supplying arbitra
Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage. Rated high severity (CVSS 7.5), this vulnera
Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted P
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today