5.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-69207

CVE-2025-69207: Khoj has an IDOR in Notion OAuth Flow Enables Index Poisoning

Khoj is a self-hostable artificial intelligence app. Prior to 2.0.0-beta.23, an IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integration by manipulating the state parameter. The callback endpoint accepts any user UUID without verifying the OAuth flow was initiated by that user, allowing attackers to replace victims' Notion configurations with their own, resulting in data poisoning and unauthorized access to the victim's Khoj search index. This attack requires knowing the user's UUID which can be leaked through shared conversations where an AI generated image is present. This vulnerability is fixed in 2.0.0-beta.23.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-69207

CVE-2025-69207:

5.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
khoj	pip	<= 2.0.0b25.dev3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the notion_auth_callback function located in src/khoj/routers/notion.py. The function directly uses the state parameter from the query string to retrieve a user object via aget_user_by_uuid(state). This state parameter is attacker-controllable. The vulnerability description and the provided proof-of-concept code clearly demonstrate that there is no validation to ensure the state parameter corresponds to the user who initiated the authentication flow. An attacker, knowing a victim's UUID, can initiate their own Notion authentication and then intercept the callback to replace the state parameter with the victim's UUID. This action causes the system to delete the victim's existing Notion configuration and create a new one with the attacker's Notion access token, effectively poisoning the victim's search index. The fix, visible in the current version of the file, involves retrieving the user from the authenticated session (request.user.object) and then validating the state parameter against the authenticated user's UUID, thus preventing the IDOR.

Vulnerable functions

notion_auth_callback

src/khoj/routers/notion.py

The `notion_auth_callback` function is vulnerable to an Insecure Direct Object Reference (IDOR). It uses the `state` parameter from the OAuth callback URL to identify the user without verifying that the user initiated the OAuth flow. An attacker can manipulate the `state` parameter to impersonate another user by providing the victim's UUID, leading to the victim's Notion integration being overwritten with the attacker's.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.