Skip to content
OpenAdvisories

Package · PyPI

cognee

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2026-58473

    Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings

    Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superus…

    topoteretes cognee cognee PyPI