CVE-2026-58473

Name of the Vulnerable Software and Affected Versions Cognee versions prior to 1.2.0

Description Improper access control allows unauthenticated attackers to overwrite the global LLM provider configuration. By self-registering an account and calling the '/api/v1/settings' endpoint, which lacks admin or superuser checks, an attacker can exploit the process-wide singleton configuration cache. This enables the redirection of all instance-wide LLM operations to an attacker-controlled endpoint, leading to the exfiltration of prompts, uploaded documents, extracted entities, and knowledge graph content from all users.

Recommendations Update Cognee to version 1.2.0 or later. Restrict access to the '/api/v1/settings' endpoint to prevent unauthorized configuration changes.