« Volver al listado

CVE-2026-13508

Estado: AplazadaBaja (2)—

A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing Handler. This manipulation of the argument conversation.agent causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Khoj — KhojAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-13508",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-13508",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-06-29T13:39:09.379215Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.1
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 2,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "LOW",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "PASSIVE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "LOW",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "LOW",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "cna@vuldb.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:khoj-ai:khoj:*:*:*:*:*:*:*:*"
          ],
          "vendor": "khoj-ai",
          "modules": [
            "Conversation Sharing Handler"
          ],
          "product": "khoj",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.0-beta.0"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.1"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.2"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.3"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.4"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.5"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.6"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.7"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.8"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.9"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.10"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.11"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.12"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.13"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.14"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.15"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.16"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.17"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.18"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.19"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.20"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.21"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.22"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.23"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.24"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.25"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.26"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.27"
            },
            {
              "status": "affected",
              "version": "2.0.0-beta.28"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-06-28T22:16:48.303",
  "references": [
    {
      "url": "https://github.com/khoj-ai/khoj/",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://github.com/khoj-ai/khoj/issues/1327",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://github.com/khoj-ai/khoj/pull/1328",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/cve/CVE-2026-13508",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/838812",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/vuln/374516",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/vuln/374516/cti",
      "source": "cna@vuldb.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cna@vuldb.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        },
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing Handler. This manipulation of the argument conversation.agent causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance."
    }
  ],
  "lastModified": "2026-06-29T18:46:31.617",
  "sourceIdentifier": "cna@vuldb.com"
}