External risk intelligence

Cohere North AI Cross-Domain Policy Flaw

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2025-61163

The vulnerability involves cross-domain policy misconfiguration in a web-based AI product. Such applications are commonly deployed as internet-facing services or APIs where validating Origin headers is a standard requirement for public-facing web security.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

This advisory details a critical vulnerability in Cohere North AI, specifically related to how it handles requests from untrusted external websites. The product improperly validates the origin of incoming connections, potentially allowing unauthorized access and manipulation.

Cross-domain policy weakness affects AI product.
Potential for unauthorized external access.
Confirm relevance and assess exposure.

Attack Path

How an attacker could exploit the issue

Attackers can exploit this vulnerability by sending specially crafted requests to the vulnerable server without needing any prior access or authentication. The server's failure to properly validate the "Origin" header allows it to accept requests from untrusted external domains. This misconfiguration can lead to significant data exposure, modification, and denial of service.

No authentication or access needed.
Untrusted domains trigger vulnerability.
Allows data exposure, modification, denial of service.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability could allow an attacker to leverage an excessively permissive cross-domain policy to interact with the service from untrusted domains. The server's failure to validate the `Origin` header of incoming connection requests may permit unauthorized access to system data, user data, or sensitive information when supported by the advisory.

System data and sensitive information.
Unauthorized cross-domain requests.
Potential data leakage or unauthorized access.

Operational Fix

Recommended remediation, mitigation, and detection steps

This vulnerability in Cohere North AI, an internet-facing AI product, likely impacts application owners and platform teams responsible for its deployment and security. The initial step involves identifying all instances of the affected technology, assessing their exposure and business criticality, and then locating the accountable owner to plan remediation based on risk.

Application owners must manage the issue.
Verify external reachability and business impact.
Plan remediation based on identified risk.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is Cohere North AI?

Cohere North AI is an artificial intelligence software package designed to process data and interact with users through web-based interfaces. Version 1.1.5 serves as an engine for automated requests, frequently deployed as an internet-facing service or API to facilitate external communication and data exchange within networked environments.

How does CWE-942 affect CVE-2025-61163?

CVE-2025-61163 is categorized under CWE-942, which refers to an overly permissive cross-domain policy. In plain terms, the software fails to properly check where an incoming web request originates. By trusting any source without verification, the server inadvertently permits unauthorized third-party websites to interact with it as if they were a trusted part of the application.

What triggers this cross-domain vulnerability?

The vulnerability is triggered when the server receives a connection request with an Origin header that it fails to validate. It is important to note that this does not require an attacker to have prior authentication or special access privileges. Conversely, requests from legitimate, trusted domains that the server is explicitly configured to allow would not trigger this specific security flaw.

Is my deployment at risk from this CVE?

According to Halo Surface Signal, this vulnerability is likely relevant if your instance is deployed as an internet-facing service. Because the flaw involves web-based origin validation, servers exposed to the public internet are at higher risk of unauthorized interaction from external domains compared to isolated systems confined to a strictly controlled internal network.

How should I respond to this threat advisory?

Start by identifying every instance of Cohere North AI running in your environment. Once you have a complete inventory, assess which instances are accessible from the internet versus those that are internal. Finally, coordinate with the specific application owners for those assets to verify their current security configuration and prioritize remediation based on their exposure and importance to your business operations.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.