---
id: CVE-2026-86867
title: >-
  Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat
  interface contains multiple vulnerabilities due to incorrect authorization and
  improper access controls
summary: >-
  Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat
  interface contains multiple vulnerabilities due to incorrect authorization and
  improper access controls. There are four handler methods in
  `libs/ktem/ktem/pag…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
cwe:
  - CWE-200
  - CWE-639
  - CWE-862
vendor: Cinnamon AI
product: Kotaemon
affected:
  - Kotaemon 0.12.0
published: '2026-09-23'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T15:17:49.290'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-86867'
references:
  - url: 'https://kb.cert.org/vuls/id/754548'
    label: cret@cert.org
  - url: 'https://www.kb.cert.org/vuls/id/754548'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-24T14:37:13.797147Z'
ingestedAt: '2026-09-23T18:29:33.145Z'
epss: 0.00137
epssPercentile: 0.02526
---

## Overview

Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in `libs/ktem/ktem/pages/chat/control.py` that load a Conversation record by its ID without comparing the requester's `user_id` to the conversation's owner `Conversation.user`. This allows any authenticated user to perform the following actions:
1. Read other user's chat transcripts, RAG retrieval history, AI-generated plots, and chat suggestions.
2. Permanently delete another user's conversation.
3. Rename another user's conversation.
4. Overwrite another user's conversation's chat suggestion list.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.