CVE-2026-13508Disclosure

LOWCVSS 2.0 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing Handler. This manipulation of the argument conversation.agent causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-285CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-13508 A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sha… https://www.cve.org/CVERecord?id=CVE-2026-13508 ----- Traducción: Se ha encontrado u… http://infoflow.cloud`
Post summary
A flaw has been reported for khoj‑ai khoj up to version 2.0.0‑beta.28, affecting an unknown function in api_chat.py, but no PoC, exploit, patch, or active exploitation details are provided.
0000038
89 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-13508 A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sha… https://www.cve.org/CVERecord?id=CVE-2026-13508
Post summary
A flaw was identified in khoj-ai khoj up to 2.0.0-beta.28 affecting an unknown function in src/khoj/routers/api_chat.py, with no PoC, exploit, or patch information provided.
00000790
57.7K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds92d
Disclosure
CVE-2026-13508 Authorization Bypass in Khoj-AI Khoj Up to 2.0.0-beta.28 Conversation Sharing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-13508
Post summary
CVE-2026-13508 is an authorization bypass affecting Khoj‑AI Khoj versions up to 2.0.0‑beta.28 related to Conversation Sharing functionality.
0000094
4.1K followersView on X

Explore more

Back to dashboard