Vulnerability · Published Oct 19, 2026 · Assigned by VulnCheck

CVE-2026-109437Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

Critical 9.8

In plain English

A critical-severity missing authentication in Cognition from CognicellAI. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.8%top 44.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST /sessions/{id}/messages without credentials, causing the Deep Agents ReAct loop to run attacker-directed shell commands through the local shell backend, resulting in remote code execution as the server process.

Affected products (as reported)

Vendor	Product	Versions
CognicellAI	Cognition	0 – before 0.13.0

Weakness: CWE-1188, CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Lasso.security Advisory technical-description, exploit
Cognition v0.13.0 Release Notes release-notes, patch
VulnCheck Advisory: Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend third-party-advisory