CVE-2026-13508

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

5.5 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L                                    

Vulnerability Description

A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing Handler. This manipulation of the argument conversation.agent causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Vulnerability Details

Published Date

June 28, 2026

Last Modified

June 28, 2026

CWE ID

CWE-285

Source

NVD

Vendor

khoj-ai

Product

khoj

External References

https://github.com/khoj-ai/khoj/
https://github.com/khoj-ai/khoj/issues/1327
https://github.com/khoj-ai/khoj/pull/1328
https://vuldb.com/cve/CVE-2026-13508
https://vuldb.com/submit/838812
https://vuldb.com/vuln/374516
https://vuldb.com/vuln/374516/cti

CVE-2026-13508

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment