VU#754548: Cinnamon's kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers
Kotaemon through v0.12.0 lets any logged-in user read or alter others' chats and document excerpts via CVE-2026-86867.
1 stories, newest first · one card per story
Kotaemon through v0.12.0 lets any logged-in user read or alter others' chats and document excerpts via CVE-2026-86867.
Today 1.6K readers · 2.5K views · 785 reads · all time 189K views