khoj-ai

Products

ProductCVEsExploitedLatest
khoj5–Jun 28, 2026

Exploited and recent CVEs

  • CVE-2026-13508 Medium 5.5 khoj-ai khoj Conversation Sharing api_chat.py authorization 0.3%
  • CVE-2025-69207 Medium 5.4 Khoj has an IDOR in Notion OAuth Flow Enables Index Poisoning 0.4%
  • CVE-2024-52294 Medium 4.3 khoj has an IDOR in subscription management that allows unauthorized subscription modifications 0.4%
  • CVE-2024-43396 Medium 5.4 Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature) 0.5%
  • CVE-2024-25639 Medium 5.9 Prompt Injection triggered XSS vulnerability in Khoj Obsidian, Desktop and Web clients 0.6%