VU#754548: Cinnamon's kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers

Reported by CERT/CC

Summary by Cyber Security News23 Sep 2026, 19:41 CEST

About this summary. This is a short, independently written summary of an article first published by CERT/CC. Cyber Security News did not report or verify the underlying story. Read the original: https://kb.cert.org/vuls/id/754548

Overview Cinnamon's Kotaemon (all versions up to v0.12.0) multi‑user chat interface does not verify conversation ownership when loading a conversation. Any authenticated user can read, delete, rename, or overwrite another user’s conversation data by supplying the correct ID. This results in high‑impact confidentiality, integrity, and availability violations.

Read the full article at CERT/CC →

Source attribution: headline and facts are from CERT/CC (kb.cert.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Coding Agents Aren't Enough! Evaluating an Enterprise Security Brain for Agentic Cloud Investigations

Subjects, Not Authors: The Authorship Hazard in Agentic Dataspaces

Prompt Injection Detection for Email Agents Through Attack Chain Modeling

Werracle: Sub-Cent Intra-Block AI Reflex Oracles and Flash-Loan Circuit Breakers for EVM Smart Contracts

Input-Layer Starvation: Why Per-Layer Pruning Breaks IoT Intrusion Detectors

XPhysICS: Cross-Physical-Domain Threat Grounding for Industrial Control Systems Security