Skip to content
OpenAdvisories

Vendor

truefoundry

2 known vulnerabilities.

Products

cognita 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-27518

    Cognita CORS misconfiguration in backend API server

    Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. An insecure CORS configuration in the Cognita backend server allows arbitrary websites to send cross site requests to the…

    truefoundry cognita