CyberSecBulletin

CognicellAI vulnerabilities

We track 1 vulnerability in CognicellAI products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest CognicellAI vulnerabilities

  • 9.8 Critical severity

    Cognition: Missing Authentication for Critical Functionality

    CVE-2026-109437CognicellAI

    Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and pos