Vulnerabilities

TI-2025-42661 CVE-2025-69207 · GHSA-6whj-7qmg-86qj

Khoj has an IDOR in Notion OAuth Flow Enables Index Poisoning

MEDIUM 64

Khoj is a self-hostable artificial intelligence app.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00414 Published 2026-02-02 Fixed in 2.0.0-beta.23 CWE-639

TI-2024-29045 CVE-2024-43396 · GHSA-cf72-vg59-4j4h

LOW 25

Khoj is an application that creates personal AI agents.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0055 Published 2024-08-20 Fixed in 1.15.0 CWE-79

TI-2024-16867 CVE-2024-25639

HIGH 66

Khoj is an application that creates personal AI agents.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00573 Published 2024-07-08 Fixed in 1.13.0 CWE-80