CVE-2025-61165 Overview
CVE-2025-61165 is an arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of Cohere North AI version 1.1.5. Attackers can upload a crafted file to achieve arbitrary code execution on the affected system. The flaw resides in the batch upload endpoint, which fails to properly validate file types or contents before accepting uploads. Successful exploitation grants attackers the ability to run code within the application context, potentially compromising data, models, and adjacent enterprise systems integrated with the AI platform.
Critical Impact
Attackers can execute arbitrary code on Cohere North AI 1.1.5 by uploading a crafted file through the /v1/my_drive/batch_upload endpoint.
Affected Products
- Cohere North AI v1.1.5
- The /v1/my_drive/batch_upload API component
- Deployments integrating the affected North AI drive service
Discovery Timeline
- 2026-08-26 - CVE-2025-61165 published to NVD
- 2026-08-26 - Last updated in NVD database
Technical Details for CVE-2025-61165
Vulnerability Analysis
The vulnerability exists in the batch file upload handler exposed at /v1/my_drive/batch_upload. The endpoint accepts user-supplied files without enforcing sufficient restrictions on file type, extension, MIME type, or content. An attacker who can reach the endpoint can upload files that the application later interprets or executes, leading to arbitrary code execution.
Because North AI is an enterprise AI platform, the drive component typically stores documents and knowledge-base assets used by downstream AI workflows. A file upload primitive in that context can pivot into full server compromise, model tampering, or lateral access to integrated data sources. Technical details are documented in the GitHub CVE-2025-61165 Vulnerability Report.
Root Cause
The root cause is missing or insufficient validation in the batch upload logic. The handler does not enforce an allowlist of safe file types, does not verify file content against expected signatures, and does not neutralize dangerous extensions before persisting files to a location reachable by the application runtime. This class of flaw aligns with unrestricted file upload weaknesses [CWE-434].
Attack Vector
An attacker with access to the North AI API submits a crafted file to /v1/my_drive/batch_upload. The upload workflow accepts the file, stores it, and the application subsequently processes or serves it in a way that leads to code execution. Depending on the deployment, the endpoint may be reachable to authenticated tenants or exposed more broadly, which affects the required position of the attacker.
No verified public proof-of-concept code is referenced in the enriched data. Refer to the linked advisory for exploitation specifics.
Detection Methods for CVE-2025-61165
Indicators of Compromise
- POST requests to /v1/my_drive/batch_upload containing files with executable, script, or archive extensions such as .php, .jsp, .py, .sh, or polyglot payloads.
- Newly written files in the North AI drive storage path that do not match expected user document types.
- Child processes spawned by the North AI application service shortly after upload activity.
Detection Strategies
- Inspect application and reverse proxy logs for uploads to the batch upload endpoint with anomalous Content-Type or filename patterns.
- Correlate upload events with subsequent outbound network connections from the North AI host to unknown destinations.
- Baseline normal file types accepted by users and alert on deviations, particularly server-side executable formats.
Monitoring Recommendations
- Enable verbose logging on the North AI API gateway and forward events to a centralized analytics platform.
- Monitor filesystem changes in North AI storage directories using host-based integrity monitoring.
- Track process creation events on the application host and alert on interpreters spawned by the web service account.
How to Mitigate CVE-2025-61165
Immediate Actions Required
- Restrict network access to the /v1/my_drive/batch_upload endpoint to trusted networks and authenticated users until a fixed version is available.
- Contact Cohere for the current patched build and upgrade guidance, referencing the Cohere Official Website and North AI Official Website.
- Audit the North AI drive storage location for unexpected files uploaded since deployment of version 1.1.5.
Patch Information
No patched version is listed in the enriched CVE data. Administrators should track vendor advisories from Cohere and apply upgrades as soon as a fixed release is published. The vulnerability report is tracked in the GitHub CVE-2025-61165 Vulnerability Report.
Workarounds
- Place a web application firewall in front of North AI to block uploads with dangerous extensions or mismatched MIME types.
- Enforce an allowlist of permitted file types at the proxy layer and reject archives or executables at the batch upload endpoint.
- Run the North AI service under a least-privileged account and mount the drive storage path with noexec where possible.
- Segment the North AI host from sensitive internal systems to limit blast radius if the endpoint is exploited.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
