CyberSecBulletin

Truefoundry vulnerabilities

We track 1 vulnerability in Truefoundry products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2025.

1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score

Latest Truefoundry vulnerabilities

  • 9.3 Critical severity

    cognita: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2025-27519TruefoundryEPSS 1.39%

    Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. A path traversal issue exists at /v1/internal/upload-to-local-directory which is enabled when the Local env variable is se