Cognition (< 0.13.0)

Cognition versions prior to 0.13.0 are vulnerable to unauthenticated remote code execution due to insecure API authentication defaults and the use of a local execution sandbox.