{"id":"CVE-2026-86867","revision":"567a5a0d4be24ce3ae55a85bd1f542e0","records":[{"revision":"567a5a0d4be24ce3ae55a85bd1f542e0","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-86867","aliases":[],"title":"Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers","description":"Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions:\r\n1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.\r\n2. Permanently delete another user's conversation.\r\n3. Rename another user's conversation.\r\n4. Overwrite another user's conversation's chat suggestion list.","state":0,"publishedAt":"2026-09-23T17:44:52.482+00:00","modifiedAt":"2026-09-24T14:37:20.022+00:00","affected":[{"ecosystem":"Vendor product","name":"Kotaemon","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cinnamon AI\",\n                    \"product\": \"Kotaemon\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0.12.0\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://kb.cert.org/vuls/id/754548"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86867","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-86867","identifiers":["CVE-2026-86867"]},"retained":false,"historicalAffected":[]}],"coverage":[]}