CVE-2025-61162

Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...

EUVD-2025-210787

Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...

CVE-2025-61162

Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...

CVE-2025-61162

Cohere North AI v1.1.5 is affected by an incorrect access control flaw in the /api/internal/v1/users/{{USER_ID}} endpoint, which allows an unauthenticated, remote attacker to arbitrarily overwrite user information via a crafted request. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network atta...