CVE-2026-90601 | getzep graphiti up to 0.30.2 REST API main.py improper authentication (Issue 1716)

September 12, 2026 Yanac

A vulnerability labeled as critical has been found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication.

This vulnerability is reported as CVE-2026-90601. The attack can be launched remotely. No exploit exists.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More