The vulnerability originates from Cognee's notebook cell execution API, which accepts arbitrary Python code and runs it using exec() without any safeguards. According to CWE-94, this uses unsafe exec without validation, making it a critical code execution flaw. An attacker can send a crafted POST request containing malicious code that is executed with the privileges of the Cognee server process. This permits arbitrary code execution, granting full control over the host system and compromising confidentiality, integrity, and availability.

Cognee versions up to 0.4.0 are affected. The issue is present in the server component that provides the notebook cell execution endpoint.

The likely attack vector is an unauthenticated or authenticated HTTP POST request to the vulnerable API endpoint. Based on the description, it is inferred that the payload can be delivered by any client with network access to the endpoint. The absence of input validation or sandboxing allows the payload to run with server privileges. The CVSS score is 9.8, indicating a critical severity. The EPSS score is <1%, indicating low probability of exploitation. No official fix is currently available, but the vulnerability is not listed in the CISA KEV catalog, indicating no publicly known exploits as of now.