Description
Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions:
1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.
2. Permanently delete another user's conversation.
3. Rename another user's conversation.
4. Overwrite another user's conversation's chat suggestion list.
Published: 2026-09-23
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized access, deletion, renaming, and tampering of user conversations leading to confidentiality and integrity compromise
Action: Immediate Patch
AI Analysis

Impact

Cinnamon AI’s Kotaemon (all versions up to 0.12.0) includes four chat handler methods that load a Conversation record by its ID without verifying the requester's user_id against the conversation’s owner. This flaw allows any authenticated user to read other users’ chat transcripts, RAG retrieval history, AI‑generated plots, and chat suggestions, as well as permanently delete, rename, or overwrite another user’s conversation and its suggestion list. The result is a breach of confidentiality, potential disruption of user experience, and alteration of data integrity.

Affected Systems

Cinnamon AI: Kotaemon versions through and including v0.12.0 are affected.

Risk and Exploitability

The EPSS score is 0.00181 (< 1%) and the vulnerability is not listed in CISA KEV, indicating a very low but nonzero likelihood of exploitation. However, the vulnerability is exploitable by any authenticated user without additional prerequisites, which makes it trivial to abuse once access is gained. The lack of access controls creates a high risk of data leakage and modification for all users. Security teams should treat this flaw as a significant threat until a fix is deployed.

Generated by OpenCVE AI on September 26, 2026 at 05:55 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest vendor patch that adds user_id verification to conversation handlers
  • If a patch is not yet released, modify the chat API to enforce that the requester’s user_id matches Conversation.user before permitting read, delete, rename, or overwrite actions
  • Implement monitoring of conversation access logs and enforce least‑privilege policies to detect and mitigate unauthorized activity

Generated by OpenCVE AI on September 26, 2026 at 05:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 24 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 24 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-200
CWE-639
CWE-862
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'}

Thu, 24 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Cinnamon
Cinnamon kotaemon
Vendors & Products Cinnamon
Cinnamon kotaemon

Wed, 23 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Wed, 23 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
References

Wed, 23 Sep 2026 18:00:00 +0000

Type Values Removed Values Added
Description Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions: 1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions. 2. Permanently delete another user's conversation. 3. Rename another user's conversation. 4. Overwrite another user's conversation's chat suggestion list.
Title Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers
References

Subscriptions

Cinnamon Kotaemon
cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2026-09-24T14:37:20.022Z

Reserved: 2026-09-08T16:29:11.518Z

Link: CVE-2026-86867

cve-icon Vulnrichment

Updated: 2026-09-23T18:10:51.647Z

cve-icon NVD

Status : Deferred

Published: 2026-09-23T18:17:09.323

Modified: 2026-09-24T15:17:49.290

Link: CVE-2026-86867

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T06:00:06Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor

  • CWE-284

    Improper Access Control

  • CWE-639

    Authorization Bypass Through User-Controlled Key

  • CWE-862

    Missing Authorization