CVE-2026-58473 describes an improper access control vulnerability in topoteretes' Cognee product before version 1.2.0. The vulnerability allows unauthenticated attackers to self-register and modify the global LLM provider configuration via the settings endpoint, which lacks admin or superuser authorization checks. This global configuration is cached as a process-wide singleton, meaning the attacker-controlled endpoint affects all users and operations instance-wide. The impact includes exfiltration of sensitive data processed by the LLM, such as prompts, documents, entities, and knowledge graph content.

The vulnerability enables unauthenticated attackers to redirect all LLM operations to an attacker-controlled endpoint, leading to potential exfiltration of sensitive data from all users of the affected instance. This includes prompts, uploaded documents, extracted entities, and knowledge graph content, compromising confidentiality and potentially integrity of user data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the settings endpoint and monitor for unauthorized account registrations or configuration changes. Avoid deploying affected versions in production environments where sensitive data is processed.