Skip to content
OpenAdvisories

Vendor

Cinnamon

3 known vulnerabilities.

Products

kotaemon 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-69098 Public exploit

    kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization

    kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint that allows unauthenticated attackers to instantiate arbitrary Python classes by supplying crafted YAML/JSON input with a __type__ field. Attackers can…

    Cinnamon kotaemon