PYSEC-2026-1492 Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)

Summary The Automation feature allows a user to insert arbitrary HTML inside the task instructions, resulting in a Stored XSS. Details The q parameter for the /api/automation endpoint does not get correctly sanitized when rendered on the page, resulting in the ability of users to inject arbitrary...

Khoj 安全漏洞

Khoj is an open-source application developed by Khoj AI. It allows users to create personal artificial intelligence agents that are always available. Versions of Khoj prior to 2.0.0-beta.23 contained security vulnerabilities. These vulnerabilities stemmed from insecure direct object references in...