What happened
CVE-2026-58473 (CVSS 9.1 Critical), published July 7, 2026, is an improper access control vulnerability in Cognee that lets any self-registered unauthenticated-tier attacker overwrite the instance-wide LLM provider configuration via the settings endpoint, which lacks authorization checks.
Why it matters
Global LLM provider hijacking in a multi-tenant AI memory platform allows an attacker to redirect all users' LLM traffic to a malicious endpoint, enabling mass prompt/response interception, credential theft, and manipulation of AI outputs across every tenant on the instance.
Attack vector
An attacker self-registers an account (no special privilege needed) and calls the settings endpoint, which performs no admin/superuser authorization check, allowing them to overwrite the global LLM provider configuration for all tenants — redirecting all LLM traffic to an attacker-controlled endpoint.
Affected systems
Cognee (AI knowledge/memory framework) before 1.2.0
Mitigation
Upgrade to Cognee ≥1.2.0 (fix per github.com/topoteretes/cognee commit d10b1b7); enforce admin/superuser checks on settings endpoints.