CVE-2026-105141: Hard-coded Credentials in topoteretes cognee
Description
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_by_email of the file cognee/modules/users/authentication/get_api_auth_backend.py of the component JWT Signing Key Handler. The manipulation of the argument FASTAPI_USERS_JWT_SECRET results in hard-coded credentials. The attack may be launched remotely. Upgrading to version 1.6.0 is sufficient to fix this issue. The patch is identified as fa65fc0cd86cdba48d19aa76e36be862be982f5d. Upgrading the affected component is advised.
CVSS v4.0
Score 5.3medium
Affected software
topoteretes
cognee
pkg:github/topoteretes/cogneecpe:2.3:a:topoteretes:cognee:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the get_user_id_by_email function in cognee/modules/users/authentication/get_api_auth_backend.py of topoteretes cognee up to version 1.5.4. The flaw arises from hard-coded credentials related to the FASTAPI_USERS_JWT_SECRET argument, which can be manipulated remotely. The issue is fixed in version 1.6.0 with patch fa65fc0cd86cdba48d19aa76e36be862be982f5d.
Potential Impact
An attacker can exploit this vulnerability remotely by leveraging hard-coded credentials, potentially compromising authentication mechanisms related to JWT signing. The CVSS 4.0 score of 5.3 indicates a medium impact with network attack vector and low complexity. There is no known exploitation in the wild at this time.
Mitigation Recommendations
Upgrade topoteretes cognee to version 1.6.0 or later, which contains the official fix for this vulnerability. No additional mitigation steps are required once the upgrade is applied.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-03T14:26:06.555Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac214bbf6d3684c3ce76aeb
Added to database: 10/04/2026, 08:56:27 UTC
Last enriched: 10/04/2026, 09:08:34 UTC
Last updated: 10/04/2026, 09:37:36 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.