cohere-ai

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

cohere-ai records in CISA KEV

No cohere-ai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70581 CVE-2026-108597 · GHSA-rg44-2cq2-qx25

Cohere Python SDK Path Traversal in SageMaker Tar Extraction

LOW 26

Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00289 Published 2026-10-10 Fix deferred CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0