cognee vulnerabilities
CVEs whose affected-version data names the cognee package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-105141Medium· 6.3A security flaw has been discovered in topoteretes cognee up to 1.5.4
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_by_email of the file cognee/modules/users/authentication/get_api_auth_backend.py of the component JWT Signing Key Han…
▾ Sunlittopoteretes · cogneeEPSS 0.34%via NVD
CVE-2026-58473Critical· 9.1PoCCognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which perfor…
Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which perfor…
▾ Abyssaltopoteretes · cogneeEPSS 0.51%via NVD