CVE-2024-25639

CVE-2024-25639 affects Khoj’s Obsidian, Desktop and Web clients, where inadequate sanitization of AI model responses and user inputs enables Cross Site Scripting via Prompt Injection from untrusted documents loaded for indexing or fetched from the internet when the /online command is used. The vu...

PT-2024-21059 · Khoj · Khoj

Name of the Vulnerable Software and Affected Versions: Khoj versions prior to 1.13.0 Description: Khoj is an application that creates personal AI agents. The Khoj Obsidian, Desktop, and Web clients inadequately sanitize the AI model's response and user inputs. This can trigger Cross Site Scriptin...

Khoj Security Vulnerabilities

Khoj is an open source application from Khoj AI. It can create ready-to-use personal AI agents for users. A security vulnerability exists in versions prior to Khoj 1.13.0 that stems from insufficient response to AI models and user input cleanup, which could lead to a cross-site scripting XSS...