CVE-2025-53358: kotaemon Vulnerable to Path Traversal via Link Upload
kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the indexfn method accepts both URLs and local file paths without validation. The pipeline streams these paths directly and stores them, enabling attackers to traverse directories (e.g. ../../../../../.env) and exfiltrate sensitive files. This issue has been patched via commit 37cdc28, in version 0.10.7 which has not been made public at time of publication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53358?
CVE-2025-53358 is considered to be a high-severity vulnerability due to its potential exploitation via unvalidated file paths.
How do I fix CVE-2025-53358?
To fix CVE-2025-53358, upgrade kotaemon to version 0.10.7 or later where input validation has been implemented.
What types of input does CVE-2025-53358 affect?
CVE-2025-53358 affects the index_fn method in kotaemon, which does not validate both URLs and local file paths before processing.
In which version of kotaemon is CVE-2025-53358 present?
CVE-2025-53358 is present in kotaemon versions prior to 0.10.7.
How does CVE-2025-53358 impact application security?
CVE-2025-53358 impacts application security by allowing potentially harmful inputs to be processed and stored without adequate validation.