CVE-2025-61165

Received Received - Intake

Arbitrary File Upload in Cohere North AI

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: MITRE

Description

An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-26

Generated

2026-08-27

AI Q&A

2026-08-27

EPSS Evaluated

N/A

NVD

CVE-2025-61165

Affected Vendors & Products

Vendor	Product	Version / Range
cohere	north_ai	1.1.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an arbitrary file upload flaw in cohere North AI v1.1.5's /v1/my_drive/batch_upload component. Attackers can exploit it by uploading a specially crafted file to execute arbitrary code on the affected system.

Detection Guidance

To detect this vulnerability, monitor file uploads to the /v1/my_drive/batch_upload endpoint in cohere North AI v1.1.5. Check for unexpected file types or large numbers of uploads. Review server logs for suspicious activity.

Impact Analysis

This vulnerability allows attackers to upload malicious files that can execute arbitrary code on your system. This could lead to unauthorized access, data theft, system compromise, or further attacks within your network.

Compliance Impact

This vulnerability could lead to unauthorized file uploads, potentially exposing sensitive data. This may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Immediately upgrade cohere North AI to a patched version if available. Disable or restrict access to the /v1/my_drive/batch_upload endpoint if not required. Monitor network traffic for unusual file upload activities.

Hi! I’m here to help you understand CVE-2025-61165. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70