EUVD-2025-210787

Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...

CVE-2025-61162

CVE-2025-61162 is an incorrect access control vulnerability in Cohere North AI v1.1.5 . An attacker can send a crafted request to the /api/internal/v1/users/{{USER_ID}} endpoint to arbitrarily overwrite user information , implying a lack of proper authorization checks on an internal API route. Th...