Vulnerability · Published Mar 7, 2025 · Assigned by GitHub_M

CVE-2025-27518Cognita CORS misconfiguration in backend API server

Medium 6.9

In plain English

A medium-severity cross-site scripting in cognita from truefoundry. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.5%top 57.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. An insecure CORS configuration in the Cognita backend server allows arbitrary websites to send cross site requests to the application. This vulnerability is fixed in commit 75079c3d3cf376381489b9a82ee46c69024e1a15.

Affected products (as reported)

Vendor	Product	Versions
truefoundry	cognita	< 75079c3d3cf376381489b9a82ee46c69024e1a15

Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

References

https://securitylab.github.com/advisories/GHSL-2024-193_GHSL-2024-194_Cognita/ x_refsource_CONFIRM
https://github.com/truefoundry/cognita/pull/424 x_refsource_MISC
https://github.com/truefoundry/cognita/commit/75079c3d3cf376381489b9a82ee46c69024e1a15 x_refsource_MISC