{"id":"CVE-2026-86867","aliases":["EUVD-2026-85508","GHSA-xj3r-7j9q-cqf2"],"status":"published","title":"Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers","description":"Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions:\r\n1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.\r\n2. Permanently delete another user's conversation.\r\n3. Rename another user's conversation.\r\n4. Overwrite another user's conversation's chat suggestion list.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00238,"percentile":0.15016,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-639","CWE-862"],"published":"2026-09-23T17:44:52Z","modified":"2026-09-24T15:32:29Z","products":[{"vendor":"cinnamon","product":"kotaemon"},{"vendor":"cinnamon ai","product":"kotaemon"}],"references":[{"url":"https://kb.cert.org/vuls/id/754548"},{"url":"https://www.kb.cert.org/vuls/id/754548"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86867"},{"url":"https://github.com/advisories/GHSA-xj3r-7j9q-cqf2"}],"sources":{"cve":[{"id":"CVE-2026-86867","title":"Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers","description":"Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions:\r\n1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.\r\n2. Permanently delete another user's conversation.\r\n3. Rename another user's conversation.\r\n4. Overwrite another user's conversation's chat suggestion list.","status":"published","published":"2026-09-23T17:44:52.482Z","modified":"2026-09-24T14:37:20.022Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-862","CWE-639","CWE-200"],"updated_at":"2026-11-02T13:49:31.546614Z"}],"euvd":[{"id":"EUVD-2026-85508","description":"Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions:\r\n1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.\r\n2. Permanently delete another user's conversation.\r\n3. Rename another user's conversation.\r\n4. Overwrite another user's conversation's chat suggestion list.","status":"published","published":"2026-09-23T17:44:52Z","modified":"2026-09-24T14:37:20Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T17:27:57.035497Z"}],"ghsa":[{"id":"GHSA-xj3r-7j9q-cqf2","title":"Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains...","description":"Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions:\n1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.\n2. Permanently delete another user's conversation.\n3. Rename another user's conversation.\n4. Overwrite another user's conversation's chat suggestion list.","status":"published","published":"2026-09-23T18:31:58Z","modified":"2026-09-24T15:32:29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:12:22.921703Z"}],"nvd":[{"id":"CVE-2026-86867","description":"Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions:\r\n1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.\r\n2. Permanently delete another user's conversation.\r\n3. Rename another user's conversation.\r\n4. Overwrite another user's conversation's chat suggestion list.","status":"published","published":"2026-09-23T18:17:09.323Z","modified":"2026-09-24T15:17:49.29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200","CWE-639","CWE-862"],"updated_at":"2026-11-02T14:12:50.703874Z"}]}}