Unrated severityNVD Advisory· Published Nov 18, 2025· Updated Nov 19, 2025
CVE-2025-56527
CVE-2025-56527
Description
Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Kotaemon/Kotaemondescription
Patches
Vulnerability mechanics
References
3- github.com/Cinnamon/kotaemon/commit/37cdc28mitre
- harvest-sink-590.notion.site/Stored-XSS-via-Unsanitized-PDF-Content-Rendering-and-Plaintext-Credential-Exposure-in-LocalStorage-236770c3fe1e80f6a1aef381fb1c8f73mitre
- skinny-exoplanet-584.notion.site/Stored-XSS-via-Unsanitized-PDF-Content-Rendering-and-Plaintext-Credential-Exposure-in-LocalStorage-22cd1563bd3380458588eb49f361a363mitre
News mentions
0No linked articles in our index yet.