Cortex vulnerabilities

1 known vulnerability in Cortex from Cdeust. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Cortex: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2026-49986Aug 14, 2026Cdeust

  The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version 3.17.1 treats the `CLAUDE_PROJECT_DIR` environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex