Live › vulnerability › CVE-2026-109437
Go to dashboardCognition before 0.13.0 ships its REST/SSE API with no authentication and defaults its agent sandbox to local execution. An attacker who can reach the API can create a session, send a message, and have the agent run shell commands as the server process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| CognicellAI/Cognition | github | < 0.13.0 | 0.13.0 |
0.13.0 are affected0.13.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST /sessions/{id}/messages without credentials, causing the Deep Agents ReAct loop to run attacker-directed shell commands through the local shell backend, resulting in remote code execution as the server process.
This page as .md · .json · in your agent: get_signal("CVE-2026-109437")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.