Junglewise Threat Intelligence

CVE-2025-69207: PYSEC-2026-1491 - Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning

CVE-2025-69207 · Severity: low · CVSS 3.1 · Published 2026-07-07

Technologies: khoj (PyPI). Vendors: PyPI.

Executive brief

Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning

Affected products

PyPI khoj

Related threats

khoj unauthenticated path traversal in /home/ endpoint
PYSEC-2026-1493 - khoj has an IDOR in subscription management allows unauthorized subscription modifications
PYSEC-2026-1492 - Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)