What’s Vulnerable › Vulnerabilities

CVE-2026-86867: Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-23 · updated 2026-09-24
• Weakness: CWE-200

Description

Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions: 1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions. 2. Permanently delete another user's conversation. 3. Rename another user's conversation. 4. Overwrite another user's conversation's chat suggestion list.

Affected products

• Cinnamon AI Kotaemon: 0.12.0

References

• https://kb.cert.org/vuls/id/754548
• https://www.kb.cert.org/vuls/id/754548

Get alerted when CVE-2026-86867 or the next vulnerability affects your stack