CVE ID :CVE-2026-109437 Published : Oct. 19, 2026, 7:17 p.m. | 47 minutes ago Description :Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API....