The vulnerability resides in the Conversation Sharing Handler within the api_chat.py component of Khoj. It is a manifestation of CWE-285 (Broken Access Control) and CWE-863 (Privilege Escalation), where an attacker can manipulate the conversation.agent argument to bypass the intended authorization checks. This allows the API to expose or modify conversation data that the user should not have access to, enabling unauthorized access to privileged resources and potentially leading to data leakage or account compromise.

The affected product is Khoj by khoj-ai. Versions up to 2.0.0-beta.28 contain the flaw. The relevant component is the Conversation Sharing API exposed via the api_chat.py router. No specific sub-versions beyond the mentioned latest beta are identified as affected.

The CVSS score of 5.1 indicates moderate severity, while no EPSS data and absence from KEV suggest it is not yet a widely targeted vulnerability. Nevertheless, the exploit is published and remote exploitation is possible, making it a realistic risk for exposed installations. Attackers can manipulate HTTP requests to the Conversation Sharing endpoint to gain excessive permissions, and the lack of an available patch at launch means remediation must wait for an official fix or manual mitigation.