Topic

Cve 2026 109437

Coverage tagged cve 2026 109437.

Articles: 1
Desk: 1

Data graphic: editorial cover for CVE-2026-109437 in the Cognition agent server from CognicellAI: a huge 9.8 CVSS 3.1 Critical score beside a NO AUTH stamp, with stats of 9.2 under CVSS 4.0, no API authentication, and the fix in 0.13.0.

highAI Security Cve 2026 109437

Cognition Agent Server Before 0.13.0 Lets Anyone on the Network Run Shell Commands (CVE-2026-109437)

CognicellAI's self-hosted agent server shipped an unauthenticated API and a host-local shell backend by default. CVSS 9.8; upgrade to 0.13.0 and add auth.

Oct 31 · 3 min