GHSA-49f7-whx5-4256

    Dashboard / Vulnerabilities / GHSA-49f7-whx5-4256

    GHSA-49f7-whx5-4256

    Published: 7 Jul 2026Last Modified: 10 Sept 2026

    Summary: Cognee allows non-superusers to overwrite global LLM configuration

    Details: Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superuser check. Attackers can redirect all LLM operations instance-wide to an attacker-controlled endpoint by exploiting the process-wide singleton configuration cache, enabling exfiltration of prompts, uploaded documents, extracted entities, and knowledge graph content from all users.

    References: https://nvd.nist.gov/vuln/detail/CVE-2026-58473, https://github.com/topoteretes/cognee/issues/3084, https://github.com/topoteretes/cognee/commit/10971db1b0bd97e88f96bd2a9ffb3edb7b22bcd0, https://github.com/topoteretes/cognee/commit/d10b1b77e2157c6238fd4d1acb1923a048991699, https://github.com/topoteretes/cognee/commit/ebcf82412d0954f5c5018444f7eee8d96fee5113, https://github.com/topoteretes/cognee, https://github.com/topoteretes/cognee/releases/tag/v1.2.0, https://www.vulncheck.com/advisories/cognee-unauthorized-llm-configuration-overwrite-via-api-v1-settings

    Affected packages

    Package

    Name: cognee

    Purl: pkg:pypi/cognee

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.5.0

    Affected versions

    0.1.0
    0.1.1
    0.1.10
    0.1.11
    0.1.12
    0.1.13
    0.1.14
    0.1.15
    0.1.16
    0.1.17
    0.1.18
    0.1.19
    0.1.2
    0.1.20
    0.1.21
    0.1.22
    0.1.23
    0.1.24
    0.1.25
    0.1.26
    0.1.27
    0.1.28
    0.1.29
    0.1.3
    0.1.32
    0.1.33
    0.1.34
    0.1.35
    0.1.36
    0.1.37
    0.1.38
    0.1.39
    0.1.4
    0.1.40
    0.1.41
    0.1.42
    0.1.43
    0.1.44
    0.1.5
    0.1.6
    0.1.7
    0.1.8
    0.1.9

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-49f7-whx5-4256 | CVE-DB