Insecure Deserialization in Kotaemon Leading to Remote Code Execution

Executive Summary

CVE-2026-69098 is an insecure deserialization vulnerability in kotaemon versions up to 0.12.0. It allows unauthenticated attackers to execute arbitrary code remotely by sending crafted YAML or JSON input with a __type__ field to the check_connection endpoint. The application improperly deserializes this input, enabling attackers to override the __type__ field with malicious Python classes like subprocess.check_output to run shell commands with the application's privileges.

Useful 0 Not Useful 0

Detection Guidance

Check if kotaemon is running and if the /check_connection endpoint is exposed. Use curl to send a test payload to the endpoint: curl -X POST http://<target>/check_connection -H 'Content-Type: application/json' -d '{"__type__": "subprocess.check_output", "args": ["whoami"]}' to see if it executes commands.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to execute arbitrary commands on the server where kotaemon is running. Since no authentication is required, attackers can gain full control over the system, steal data, install malware, or disrupt services. The impact includes complete system compromise with the same privileges as the kotaemon application.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance requirements for GDPR and HIPAA due to unauthorized remote code execution. GDPR requires protection against unauthorized access to personal data, while HIPAA mandates safeguards for protected health information. Exploitation could lead to data breaches, resulting in legal penalties, fines, and reputational damage for affected organizations.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update kotaemon to a patched version if available. If not, disable the /check_connection endpoint or restrict access via firewall rules. Remove safe=False from deserialize() calls and implement proper input validation.

Useful 0 Not Useful 0