Improper Access Control in Cognee by Topoteretes

CVE-2026-58473

What is CVE-2026-58473?

Cognee, prior to version 1.2.0, exhibits an improper access control vulnerability that allows unauthenticated attackers to register an account and modify global LLM provider configurations through the settings endpoint. This endpoint does not enforce necessary administrative checks, enabling attackers to redirect all LLM operations to a malicious endpoint. The exploitation of this vulnerability could lead to extensive data exposure, allowing attackers to intercept user prompts, uploaded documents, extracted entities, and knowledge graph content across the entire system.

References