Vendors / mem0 Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now mem0 records in CISA KEV No mem0 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00489 · Published 2026-05-12 · No fix listed CWE-306
Priority LOW 35
The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00374 · Published 2026-05-12 · No fix listed CWE-306
Priority LOW 30
The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories).
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00335 · Published 2026-05-12 · No fix listed CWE-306
Priority LOW 29
The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}).
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00386 · Published 2026-05-12 · No fix listed CWE-306
Priority LOW 29
The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories).
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00386 · Published 2026-05-12 · No fix listed CWE-306
Open these records in search → All records by CVSS severity
3 0 4 0 0
THREATIST.IORead the docs