CVE-2025-61164CWE-200information-disclosure

CVE-2025-61164

High · published August 26, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-08-26T23:16Z
References (3)
https://cohere.com/north · [email protected]https://github.com/bdadoa/Cohere---North-AI-1.1.5---Vulnerabilities/blob/main/CVE-2025-61164.md · [email protected]https://github.com/bdadoa/Cohere---North-AI-1.1.5---Vulnerabilities/blob/main/CVE-2025-61164.md · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 28 AUG 06:23Z
    EPSS moved — → 0%
    epss
  • 26 AUG 00:00Z
    Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint
    cvelistv5