CVE-2025-61164: Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint.
highvulnerabilityLLM-Specific
security
Summary
Cohere North AI version 1.1.5 has a security flaw where sensitive information can leak through its WebSocket endpoint (a two-way communication channel between a client and server). This vulnerability allows unauthorized access to data that should be protected.
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Disclosure Date
August 26, 2026
Classification
Attack Type
Data Extraction
Attack SophisticationModerate
Impact (CIA+S)
confidentiality
AI Component TargetedAPI
Affected Vendors
Cohere
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-61164
First tracked: August 26, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 85%