CVE-2025-61162
Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/{{USER_ID}} endpoint
- Published Aug 26, 2026
- CVSS 7.5 high
- 0.2% chance of exploitation in the next 30 days (EPSS)