CVE-2026-90601 in graphiti

Prediction

by VulDB Data Team • 09/12/2026

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-403183
• CPE: ready
• CWE: CWE-287 (confirmed)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-90601
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-90601
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-90601/