What’s Vulnerable › Vulnerabilities

CVE-2026-109437: Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-19 · updated 2026-10-20
• Weakness: CWE-306

Description

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST /sessions/{id}/messages without credentials, causing the Deep Agents ReAct loop to run attacker-directed shell commands through the local shell backend, resulting in remote code execution as the server process.

Affected products

• CognicellAI Cognition: before 0.13.0 — fixed in 0.13.0

How to fix

Upgrade to a fixed version: CognicellAI Cognition 0.13.0. Check the vendor advisory for mitigations.

References

• https://github.com/CognicellAI/Cognition/releases/tag/v0.13.0
• https://www.lasso.security/vulnerability-database/cve-2026-109437
• https://www.vulncheck.com/advisories/cognition-unauthenticated-rce-via-local-shell-backend

Get alerted when CVE-2026-109437 or the next vulnerability affects your stack