{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-109437/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:cognition:cognition:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-109437"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Cognition (\u003c 0.13.0)"],"_cs_severities":["critical"],"_cs_tags":["cve-2026-109437","remote-code-execution","api-security"],"_cs_type":"advisory","_cs_vendors":["Cognition"],"content_html":"\u003cp\u003eCognition versions before 0.13.0 contain a critical unauthenticated remote code execution vulnerability identified as CVE-2026-109437. The flaw exists because the software defaults its agent sandbox backend to local execution and fails to enforce authentication on its REST/SSE API endpoints. An attacker can exploit this by interacting with the API to create sessions and send messages, which forces the Deep Agents ReAct loop to execute arbitrary commands. Because the system lacks authentication, these commands are executed with the privileges of the server process, leading to full system compromise. This vulnerability is particularly severe due to the ease of exploitation, requiring no prior access or credentials to the system.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker performs discovery to identify publicly exposed Cognition API instances.\u003c/li\u003e\n\u003cli\u003eAttacker initiates an unauthenticated session by sending a POST request to the /sessions endpoint.\u003c/li\u003e\n\u003cli\u003eAPI accepts the request and generates a session ID without requiring authentication tokens or credentials.\u003c/li\u003e\n\u003cli\u003eAttacker crafts a malicious message payload intended to trigger the Deep Agents ReAct loop.\u003c/li\u003e\n\u003cli\u003eAttacker sends the payload to the /sessions/{id}/messages endpoint via a POST request.\u003c/li\u003e\n\u003cli\u003eThe backend processes the message and, due to the local execution sandbox configuration, interprets the embedded ReAct commands.\u003c/li\u003e\n\u003cli\u003eThe server process executes the attacker-provided shell commands via the local shell backend.\u003c/li\u003e\n\u003cli\u003eAttacker achieves remote code execution as the user account running the Cognition server process.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for arbitrary code execution on the server running the Cognition instance. This can lead to complete host takeover, lateral movement within the network, and exfiltration of sensitive data handled by the agent. The vulnerability affects all deployments of Cognition prior to version 0.13.0.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpgrade Cognition to version 0.13.0 or later immediately to patch CVE-2026-109437.\u003c/li\u003e\n\u003cli\u003eImplement strict network access control lists (ACLs) to ensure the Cognition REST/SSE API is not accessible from the public internet.\u003c/li\u003e\n\u003cli\u003eMonitor web server logs for suspicious POST requests targeting /sessions and /sessions/{id}/messages endpoints from unauthorized IP addresses.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-19T20:11:46Z","date_published":"2026-10-19T20:11:46Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cognition-rce/","summary":"Cognition versions prior to 0.13.0 are vulnerable to unauthenticated remote code execution due to insecure API authentication defaults and the use of a local execution sandbox.","title":"Unauthenticated Remote Code Execution in Cognition","url":"https://feed.craftedsignal.io/briefs/2026-10-cognition-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-109437","version":"https://jsonfeed.org/version/1.1"}