Cohere---North-AI-1.1.5---Vulnerabilities
by Bdadoa
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-61165 | Cri | 0.64 | 9.8 | 0.00 | Aug 26, 2026 | An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file. | ||
| CVE-2025-61164 | Hig | 0.49 | 7.5 | 0.00 | Aug 26, 2026 | Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint. |
- risk 0.64cvss 9.8epss 0.00
An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file.
- risk 0.49cvss 7.5epss 0.00
Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint.