CyberRota Analysis
AI-GeneratedThe vulnerability allows unauthenticated attackers to exploit the check_connection endpoint in kotaemon versions up to 0.12.0 through insecure deserialization, enabling them to instantiate arbitrary Python classes via crafted YAML/JSON input. This can lead to remote code execution with the privileges of the application process, posing a critical risk to affected systems. Organizations using kotaemon should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint that allows unauthenticated attackers to instantiate arbitrary Python classes by supplying crafted YAML/JSON input with a __type__ field. Attackers can exploit this to override the __type__ field with subprocess.check_output and arbitrary arguments, achieving remote code execution with application process privileges.