Vendor
Kotaemon through version 0.12.0 contains an authorization bypass vulnerability allowing unauthorized users to access, modify, or delete chat histories belonging to others.