Skip to content
OpenAdvisories

Vendor

Cinnamon AI

1 known vulnerabilities.

Products

Kotaemon 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-86867

    Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers

    Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` th…

    Cinnamon AI Kotaemon