TI-2026-25457 CVE-2026-33010 · GHSA-g9rg-8vq5-mpwm
mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft
Priority HIGH 73
mcp-memory-service is an open-source memory backend for multi-agent systems.
doobidoo
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
doobidoo records in CISA KEVNo doobidoo vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2026-23373 CVE-2026-29787 · GHSA-73hc-m4hx-79pj
mcp-memory-service: System Information Disclosure via Health Endpoint
Priority MEDIUM 63
mcp-memory-service is an open-source memory backend for multi-agent systems.
TI-2026-36853 CVE-2026-50027 · GHSA-84hp-mqvj-3p8h
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
Priority MEDIUM 51
mcp-memory-service is a semantic memory layer for AI applications.
TI-2026-36477 CVE-2026-49291 · GHSA-2r68-g678-7qr3
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Priority LOW 38
mcp-memory-service is a semantic memory layer for AI applications.