CVE-2026-69098_exploit

CVE-2026-69098 — ejecución remota de código por deserialización no autenticada en kotaemon Ejecución remota de código no autenticada en kotaemon = 0.12.0 mediante deserialización insegura en la comprobación de conexión de los ajustes de LLM. El fallo El controlador Gradio checkconnection de los...

Kotaemon-CVE-2025-56526-56527-disclosure

Kotaemon CVE-2025-56526 与 CVE-2025-56527 公开披露 Kotaemon 信息面板中的存储型跨站脚本与 localStorage 中的明文凭据存储相结合，使得单个恶意 PDF 上传即可导致完全会话劫持。 执行摘要 受影响产品/版本 ：Kotaemon = 0.11.0（包括提交 37cdc28） 漏洞 ： CVE-2025-56526 – 通过未净化的 PDF 内容渲染导致的存储型 XSS CVE-2025-56527 – localStorage 中存储明文用户名/密码 所需权限 ：具有文档上传权限的认证用户 影响 ：凭证窃取、持久化会话劫持、LLM...

CVE-2025-57298

通过不安全的 Markdown 渲染导致的存储型 XSS 漏洞（Kotaemon） 概述 Kotaemon 是一个基于 RAG（检索增强生成）的开源文档问答系统，提供 Web 界面用于查询上传的 PDF、Word 和 Excel 等文件。 Kotaemon 的文档渲染管道中存在一个存储型跨站脚本（XSS）漏洞。 用户控制的内容经过 LLM 处理后，在 Markdown 到 HTML 的转换过程中未进行适当的清理，从而允许攻击者提供的 HTML 元素被持久性地注入到页面中。 当上传一份文档时，系统会自动触发一个摘要请求（例如“summary this...

CVE-2025-63914

CVE-2025-63914 CVE-2025-63914 的公开披露与补丁：Cinnamon/kotaemon 中的 ZIP 炸弹漏洞。 致谢 Wang Yuanrong 摘要 mayextractzip 函数未对 ZIP 解压缩施加限制，使恶意的 ZIP 炸弹能够触发过多的资源消耗并导致拒绝服务。 详情 \libs\ktem\ktem\index\file\ui.py 文件中的 mayextractzip 函数未检查上传 ZIP 文件的内容。尽管这些内容会被解压到一个临时文件夹中（该文件夹在每次解压前会清空），但成功上传一个 ZIP...

CVE-2026-82281

Kotaemon through 0.12.0 fails to properly validate conversation ownership in selectconv, deleteconv, renameconv, and onsetpublicconversation functions in control.py. Attackers can read other users' chat histories, delete conversations, or rename conversations by supplying arbitrary conversation...

EUVD-2026-67812

Kotaemon through 0.12.0 fails to properly validate conversation ownership in selectconv, deleteconv, renameconv, and onsetpublicconversation functions in control.py. Attackers can read other users' chat histories, delete conversations, or rename conversations by supplying arbitrary conversation...

CVE-2026-82281 Kotaemon Missing Ownership Check in Conversation Functions

Kotaemon through 0.12.0 fails to properly validate conversation ownership in selectconv, deleteconv, renameconv, and onsetpublicconversation functions in control.py. Attackers can read other users' chat histories, delete conversations, or rename conversations by supplying arbitrary conversation...

CVE-2026-82281 Kotaemon Missing Ownership Check in Conversation Functions

Kotaemon through 0.12.0 fails to properly validate conversation ownership in selectconv, deleteconv, renameconv, and onsetpublicconversation functions in control.py. Attackers can read other users' chat histories, delete conversations, or rename conversations by supplying arbitrary conversation...

CVE-2026-82281 Kotaemon Missing Ownership Check in Conversation Functions

Kotaemon through 0.12.0 fails to properly validate conversation ownership in selectconv, deleteconv, renameconv, and onsetpublicconversation functions in control.py. Attackers can read other users' chat histories, delete conversations, or rename conversations by supplying arbitrary conversation...

CVE-2026-82281

Kotaemon (by Cinnamon) through 0.12.0 is affected by a missing ownership validation in the select_conv , delete_conv , rename_conv , and on_set_public_conversation functions within libs/ktem/ktem/pages/chat/control.py. An unauthenticated attacker with no privileges required can supply arbitrary c...

CVE-2026-69098 kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization

kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the checkconnection endpoint that allows unauthenticated attackers to instantiate arbitrary Python classes by supplying crafted YAML/JSON input with a type field. Attackers can exploit this to override the type field wi...

CVE-2026-69098

Kotaemon 0.12.0 and earlier versions are vulnerable to an insecure deserialization in the check_connection endpoint. An unauthenticated attacker can supply crafted YAML/JSON input containing a type field to instantiate arbitrary Python classes. The attacker can override the type to subprocess.che...

CVE-2026-69098 kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization

kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the checkconnection endpoint that allows unauthenticated attackers to instantiate arbitrary Python classes by supplying crafted YAML/JSON input with a type field. Attackers can exploit this to override the type field wi...

📄 Cinnamon kotaemon 0.11.0 ZIP Bomb

Cinnamon kotaemon version 0.11.0 zip bomb proof of concept denial of service exploit. ============================================================================================================================================= | Title : Cinnamon kotaemon v 0.11.0 ZIP Bomb Vulnerability in...

CVE-2025-63914

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

EUVD-2025-198989

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

CVE-2025-63914

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

CVE-2025-63914

Cinnamon kotaemon 0.11.0 is affected by CVE-2025-63914 due to the _may_extract_zip function in lib/ktem/ktem/index/file/ui.py not validating uploaded ZIP contents. This can allow a ZIP bomb to exhaust resources during decompression; even though files are extracted to a temporary folder cleared af...

CVE-2025-63914

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

Cinnamon kotaemon 安全漏洞

Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A security vulnerability exists in Cinnamon kotaemon version 0.11.0, which stems from a failure of the mayextractzip function to check the contents of a ZIP file, which could lead to resource exhaustion...