PT-2024-21059 · Khoj · Khoj

Calligraf0 · Published 2024-07-08 · Updated 2024-08-28 · CVE-2024-25639

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Khoj versions prior to 1.13.0

Description Khoj is an application that creates personal AI agents. The Khoj Obsidian, Desktop, and Web clients inadequately sanitize the AI model's response and user inputs. This can trigger Cross Site Scripting (XSS) via Prompt Injection from untrusted documents either indexed by the user on Khoj or read by Khoj from the internet when the user invokes the "online" command.

Recommendations For versions prior to 1.13.0, update to version 1.13.0 to resolve the issue. As a temporary workaround, consider restricting the use of the /online command until the update is applied. Additionally, avoid using untrusted documents with the AI model to minimize the risk of exploitation.

Exploit

Fix

XSS

Command Injection

Weakness Enumeration

CWE-80

CWE-79

CWE-77

Related Identifiers

CVE-2024-25639

GHSA-H2Q2-VCH3-72QM

Affected Products

Khoj

References · 10

• 🔥 https://github.com/khoj-ai/khoj/security/advisories/GHSA-h2q2-vch3-72qm · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25639.json · Exploit
• https://github.com/khoj-ai/khoj/commit/1dfd6d7391862d3564db7f4875216880b73cb6cc · Patch
• https://osv.dev/vulnerability/CVE-2024-25639 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25639 · Security Note
• https://twitter.com/VulmonFeeds/status/1810352447186993357 · Twitter Post
• https://t.me/cvedetector/185 · Telegram Post
• https://twitter.com/sisinerdtweets/status/1828796702867800414 · Twitter Post
• https://t.me/cvenotify/91724 · Telegram Post
• https://twitter.com/CVEnew/status/1810325758805520643 · Twitter Post