Advisories · Technology

Cinnamon AI Kotaemon.

Every CVE that names Cinnamon AI Kotaemon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-86867 CVE record

CVSS 6.5 Medium

Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers
- Cinnamon AI Kotaemon
- Information disclosure
- Broken access control
Not analysed yet 23 Sept 2026