Kotaemon
Monthly
Broken access control in Kotaemon through 0.12.0 lets any user act on conversations they do not own by supplying arbitrary conversation identifiers to the select_conv, delete_conv, rename_conv, and on_set_public_conversation handlers in control.py. Because these functions never verify that the requesting user owns the referenced conversation, an attacker can read other users' chat histories and delete or rename their conversations. Reported by VulnCheck; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in kotaemon (Cinnamon) versions through 0.12.0 allows unauthenticated attackers to run arbitrary commands via the check_connection endpoint, which insecurely deserializes attacker-supplied YAML/JSON. By setting the __type__ field to subprocess.check_output with chosen arguments, an attacker instantiates arbitrary Python objects and executes OS commands with the application's process privileges. Publicly available exploit code exists (VulnCheck advisory and upstream issue), and the CVSS 4.0 base score is 9.3, though there is no public exploit identified as actively exploited.
Broken access control in Cinnamon's Kotaemon (all versions up to and including v0.12.0) allows any authenticated user on a shared, multi-user deployment to read, rename, delete, or overwrite the chat suggestion list of another user's conversations simply by supplying a victim's conversation ID, because four handler methods in libs/ktem/ktem/pages/chat/control.py load Conversation records without comparing the requester's user_id to Conversation.user. Exploitation requires a valid account on a multi-user instance where tenants share the same conversation store, needs no victim interaction, and is limited to accounts that can supply or enumerate valid conversation IDs (independent assessment: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, a moderate-priority broken-access-control/IDOR issue). There is no public exploit identified at time of analysis, EPSS is low at 0.14% (3rd percentile), and CISA SSVC records Exploitation: none with partial technical impact.
An issue was discovered in Cinnamon kotaemon 0.11.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Broken access control in Kotaemon through 0.12.0 lets any user act on conversations they do not own by supplying arbitrary conversation identifiers to the select_conv, delete_conv, rename_conv, and on_set_public_conversation handlers in control.py. Because these functions never verify that the requesting user owns the referenced conversation, an attacker can read other users' chat histories and delete or rename their conversations. Reported by VulnCheck; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in kotaemon (Cinnamon) versions through 0.12.0 allows unauthenticated attackers to run arbitrary commands via the check_connection endpoint, which insecurely deserializes attacker-supplied YAML/JSON. By setting the __type__ field to subprocess.check_output with chosen arguments, an attacker instantiates arbitrary Python objects and executes OS commands with the application's process privileges. Publicly available exploit code exists (VulnCheck advisory and upstream issue), and the CVSS 4.0 base score is 9.3, though there is no public exploit identified as actively exploited.
Broken access control in Cinnamon's Kotaemon (all versions up to and including v0.12.0) allows any authenticated user on a shared, multi-user deployment to read, rename, delete, or overwrite the chat suggestion list of another user's conversations simply by supplying a victim's conversation ID, because four handler methods in libs/ktem/ktem/pages/chat/control.py load Conversation records without comparing the requester's user_id to Conversation.user. Exploitation requires a valid account on a multi-user instance where tenants share the same conversation store, needs no victim interaction, and is limited to accounts that can supply or enumerate valid conversation IDs (independent assessment: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, a moderate-priority broken-access-control/IDOR issue). There is no public exploit identified at time of analysis, EPSS is low at 0.14% (3rd percentile), and CISA SSVC records Exploitation: none with partial technical impact.
An issue was discovered in Cinnamon kotaemon 0.11.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.