CVE-2026-31231

Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint. The endpoint is designed to execute arbitrary Python code provided by the user, but it does so using the unsafe exec function without any sandboxing, validation, or security...

CVE-2026-31231

The Cognee library (versions through v0.4.0 ) is vulnerable to a critical remote code execution (RCE) flaw in its notebook cell execution API endpoint . The vulnerability exists because the endpoint executes arbitrary Python code provided by users via the unsafe exec() function without any sandbo...