Vulnerability · Published Jul 2, 2025 · Assigned by GitHub_M

CVE-2025-53358kotaemon Vulnerable to Path Traversal via Link Upload

Medium 6.5

In plain English

A medium-severity path traversal in kotaemon from Cinnamon. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.5%top 59.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the index_fn method accepts both URLs and local file paths without validation. The pipeline streams these paths directly and stores them, enabling attackers to traverse directories (e.g. ../../../../../.env) and exfiltrate sensitive files. This issue has been patched via commit 37cdc28, in version 0.10.7 which has not been made public at time of publication.

Affected products (as reported)

Vendor	Product	Versions
Cinnamon	kotaemon	<= 0.10.6

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/Cinnamon/kotaemon/security/advisories/GHSA-jw4w-xcvf-jq5x x_refsource_CONFIRM
https://github.com/Cinnamon/kotaemon/pull/755 x_refsource_MISC
https://github.com/Cinnamon/kotaemon/commit/37cdc28ceb46e505d25221584daf1fe61e26b2cc x_refsource_MISC