CVE-2025-53358

6.5 mediumEPSS 0.5%

Medium (6.5). EPSS 0.5% chance of exploitation in the next 30 days.

kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the index_fn method accepts both URLs and local file paths without validation. The pipeline streams these paths directly and stores them, enabling attackers to traverse directories (e.g. ../../../../../.env) and exfiltrate sensitive files. This issue has been patched via commit 37cdc28, in version 0.10.7 which has not been made public at time of publication.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2025-07-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/Cinnamon/kotaemon/commit/37cdc28ceb46e505d25221584daf1fe61e26b2cc
https://github.com/Cinnamon/kotaemon/pull/755
https://github.com/Cinnamon/kotaemon/security/advisories/GHSA-jw4w-xcvf-jq5x

Check your stack JSON