CVE-2025-61165

Summary

An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/bdadoa/Cohere—North-AI-1.1.5—Vulnerabilities/blob/main/CVE-2025-61165.md

References

• http://cohere.com
• http://north.com
• https://github.com/bdadoa/Cohere—North-AI-1.1.5—Vulnerabilities/blob/main/CVE-2025-61165.md

• ←Previous
• Next→