Skip to content
OpenAdvisories

Vendor

Cinnamon

3 known vulnerabilities.

Products

kotaemon 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-53358

    kotaemon Vulnerable to Path Traversal via Link Upload

    kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the index_fn method accepts both URLs and local file paths without validation. The pipeline streams these paths directly …

    Cinnamon kotaemon