« Volver al listado

CVE-2025-53358

Estado: AplazadaMedia (6.5)—

kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the index_fn method accepts both URLs and local file paths without validation. The pipeline streams these paths directly and stores them, enabling attackers to traverse directories (e.g. ../../../../../.env) and exfiltrate sensitive files. This issue has been patched via commit 37cdc28, in version 0.10.7 which has not been made public at time of publication.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Cinnamon — KotaemonAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-53358",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-53358",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-07-02T16:00:17.510190Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "Cinnamon",
          "product": "kotaemon",
          "versions": [
            {
              "status": "affected",
              "version": "<= 0.10.6"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-07-02T16:15:29.280",
  "references": [
    {
      "url": "https://github.com/Cinnamon/kotaemon/commit/37cdc28ceb46e505d25221584daf1fe61e26b2cc",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/Cinnamon/kotaemon/pull/755",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/Cinnamon/kotaemon/security/advisories/GHSA-jw4w-xcvf-jq5x",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the index_fn method accepts both URLs and local file paths without validation. The pipeline streams these paths directly and stores them, enabling attackers to traverse directories (e.g. ../../../../../.env) and exfiltrate sensitive files. This issue has been patched via commit 37cdc28, in version 0.10.7 which has not been made public at time of publication."
    },
    {
      "lang": "es",
      "value": "kotaemon es una herramienta de código abierto basada en RAG para la comprensión de documentos. A partir de la versión 0.10.6 y anteriores, en libs/ktem/ktem/index/file/ui.py, el método index_fn acepta URL y rutas de archivos locales sin validación. La canalización transmite estas rutas directamente y las almacena, lo que permite a los atacantes recorrer directorios (p. ej., ../../../../../..env) y extraer archivos confidenciales. Este problema se ha corregido mediante el commit 37cdc28, en la versión 0.10.7, que aún no se ha publicado."
    }
  ],
  "lastModified": "2026-06-17T09:38:05.387",
  "sourceIdentifier": "security-advisories@github.com"
}