cognee vulnerabilities

1 known vulnerability in cognee from Topoteretes. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  cognee: Missing Authentication for Critical Functionality

  CVE-2026-58473Jul 7, 2026Topoteretes

  Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superuse