CVE-2025-56527 | Kotaemon 0.11.0 LocalStorage missing encryption

November 18, 2025 Yanac

A vulnerability categorized as problematic has been discovered in Kotaemon 0.11.0. Affected by this vulnerability is an unknown functionality of the component LocalStorage Handler. Such manipulation leads to missing encryption of sensitive data.

This vulnerability is documented as CVE-2025-56527. The attack needs to be performed locally. There is not any exploit available.VulDB Recent EntriesRead More