Unknown nvd · CVE-2025-61162

CVE-2025-61162: Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted req

Published Aug 26, 2026

Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/{{USER_ID}} endpoint

Auth Bypass

Affected AI Products

cohere

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.