PyPI/khoj CVE-2025-69207: medium 5.4, EPSS 0.42%
Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.0b25.dev3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1491
- https://github.com/khoj-ai/khoj/security/advisories/GHSA-6whj-7qmg-86qj
- https://nvd.nist.gov/vuln/detail/CVE-2025-69207
- https://github.com/khoj-ai/khoj/commit/1b7ccd141d47f365edeccc57d7316cb0913d748b
- https://github.com/khoj-ai/khoj
- https://github.com/khoj-ai/khoj/releases/tag/2.0.0-beta.23
- https://pypi.org/project/khoj
- https://github.com/advisories/GHSA-6whj-7qmg-86qj
CVE-2025-69207 · published · modified · JSON