topoteretes

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

topoteretes records in CISA KEV

No topoteretes vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-42077 CVE-2026-58473 · GHSA-49f7-whx5-4256

Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings

HIGH 81

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpo…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00511 Published 2026-07-07 Fixed in 1.2.0, 1.5.0 CWE-306

TI-2026-67531 CVE-2026-105141 · GHSA-xrgh-2vxr-rhm4

topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials

LOW 24

A security flaw has been discovered in topoteretes cognee up to 1.5.4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00344 Published 2026-10-04 Fixed in 1.6.0 CWE-259

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0