CVE-2025-61162: Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted req

Cohere North AI version 1.1.5 has a flaw in its access control (the system that checks whether a user is allowed to perform an action) that lets attackers modify other users' information by sending specially crafted requests to a specific API endpoint. This means an attacker could change someone else's user data without permission.