TI-2026-67531 CVE-2026-105141 · GHSA-xrgh-2vxr-rhm4
topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials
Priority LOW 24
A security flaw has been discovered in topoteretes cognee up to 1.5.4.
Vulnerabilities
2 records
TI-2026-42077 CVE-2026-58473 · GHSA-49f7-whx5-4256
Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings
Priority HIGH 81
Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpo…