khoj-ai — Vulnerabilities & Security Advisories 4

Khoj-ai develops an AI-powered search and knowledge management tool that helps users organize and retrieve information from various sources. Historically, the platform has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by its four recorded CVEs. These vulnerabilities often stem from improper input validation and insufficient access controls in web interfaces and API endpoints. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests potential risks for organizations implementing the solution, particularly in environments handling sensitive data where unpatched instances could lead to system compromise or data breaches.