The vulnerability in Cognee (up to v0.4.0) arises from the use of the unsafe exec() function in its notebook cell execution API endpoint, which accepts and runs arbitrary Python code without any sandboxing, validation, or security controls. This design flaw enables remote attackers to execute arbitrary code on the server by sending specially crafted POST requests containing malicious Python code. The execution occurs with the privileges of the server process, potentially leading to complete system compromise. The vulnerability is publicly disclosed but lacks a CVSS score and official remediation details.

Successful exploitation results in arbitrary code execution on the Cognee server with the privileges of the server process, allowing an attacker to gain full control over the affected system. This can lead to data compromise, service disruption, and further attacks originating from the compromised server. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid exposing the vulnerable notebook cell execution API endpoint to untrusted networks or users. Implementing network-level access controls or disabling the vulnerable functionality may reduce risk.