Vulnerability · Published Jul 7, 2026 · Assigned by VulnCheck

CVE-2026-58473Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings

Critical 9.1

In plain English

A critical-severity missing authorization in cognee from topoteretes. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.1Critical

Exploit odds (30 days)0.5%top 56.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superuser check. Attackers can redirect all LLM operations instance-wide to an attacker-controlled endpoint by exploiting the process-wide singleton configuration cache, enabling exfiltration of prompts, uploaded documents, extracted entities, and knowledge graph content from all users.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	cognee	1.5.0	GHSA-49f7-whx5-4256
PyPI	cognee	1.5.0	PYSEC-2026-3816

Affected products (as reported)

Vendor	Product	Versions
topoteretes	cognee	0 – before 1.2.0

Weakness: CWE-862, CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

Release Notes release-notes
Researcher Disclosure technical-description, exploit
Fix Commit patch
https://www.vulncheck.com/advisories/cognee-unauthorized-llm-configuration-overwrite-via-api-v1-settings third-party-advisory