CVE-2025-61163

Summary

Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This occurs via the server failing to validate the Origin header of incoming connection requests.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/bdadoa/Cohere—North-AI-1.1.5—Vulnerabilities/blob/main/CVE-2025-61163.md

References

• https://cohere.com/north
• https://github.com/bdadoa/Cohere—North-AI-1.1.5—Vulnerabilities/blob/main/CVE-2025-61163.md

• ←Previous
• Next→