CVE-2025-61163

Critical

Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This occurs via the…

mitre·CWE-942·Published 2026-08-26

CVSS

9.8

EPSS

0.00

KEV

Exploits

cve.orgen

213 chars

Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This occurs via the server failing to validate the Origin header of incoming connection requests.

NVDen

213 chars

NVDes

234 chars

Se descubrió que Cohere North AI v1.1.5 contiene una política de dominio cruzado excesivamente permisiva con dominios no confiables. Esto ocurre porque el servidor no valida la cabecera Origin de las solicitudes de conexión entrantes.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	ENISA EUVD	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H