Cinnamon AI

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cinnamon AI records in CISA KEV

No Cinnamon AI vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-59386 CVE-2026-86867 · GHSA-xj3r-7j9q-cqf2

Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers

LOW 28

Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00238 Published 2026-09-23 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0