khoj
1.42.10Your AI second brain. Self-hostable. Get answers from the web or your docs. Build custom agents, schedule automations, do deep research. Turn any online or local LLM into your personal, autonomous AI (gpt, claude, gemini, llama, qwen, mistral). Get started - free.
- Maintenance
- Slow0 commits in 3 months · bus factor 1
- License
- AGPL-3.0Copyleft · OSI-approved
- Security
- 6 advisories4 medium, 2 low
- Supported versions
- No scheduleendoflife.date does not track this project
38.1k stars · 2.6k forks · 170 open issues · last release 1 year ago · data checked 4 hours ago
Security advisories
All advisories on GitHubThe 6 most recent advisories published by the maintainers: 4 medium, 2 low. Check the patched version against the one you run.
- lowGHSA-62mm-xwmv-crhgJun 24, 2026Unauthenticated path traversal in /home/ endpoint allows file read from server filesystem
- Affected
- <= latest (current `main` branch)
- Patched in
- (none)
- mediumCVE-2025-69207Feb 1, 2026IDOR in Notion OAuth Flow Enables Index Poisoning
- Affected
- latest
- mediumCVE-2024-52294Dec 29, 2024IDOR in subscription management allows unauthorized subscription modifications
- Affected
- <1.29.0
- Patched in
- 1.29.0
- mediumCVE-2024-43396Aug 20, 2024Stored XSS In Automate (Preview feature)
- Affected
- <1.15
- Patched in
- >=1.15
- mediumCVE-2024-25639Jul 8, 2024Prompt Injection triggered XSS vulnerability in Khoj Obsidian, Desktop and Web clients
- Affected
- <1.13.0
- Patched in
- 1.13.0
- lowGHSA-564j-v29w-rqr6Jul 8, 2024Open Redirect Vulnerability in Login Page
- Affected
- <1.14.0
- Patched in
- 1.14.0