Read the docs
TI-2026-36793 Aliases CVE-2026-49948GHSA-hp66-92p5-jh23

Mem0 0.2.8 Missing Authorization via POST /configure Endpoint

Priority HIGH 72CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configuration but only verifies authentication via JWT or X-API-Key without validating the caller's role. Any authenticated user holding a distributed API key can redirect all LLM and embedder traffic to an attacker-controlled server, with the malicious configuration persisted to PostgreSQL and surviving server restarts to affect all users and API keys on the instance.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0029 21st percentileScored 2026-11-07
Fix Fixed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
mem0aimem0up to 0.2.8—Patch availableCNA
  • mem0 Vendormem0ai Affected up to 0.2.8 Fixed in — Patch available CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-49948
  2. 2026-10-03 Alias added: GHSA-hp66-92p5-jh23

References

Patch 2

Other 2

  • TI-2026-06680 mem0ai mem0 faiss.py pickle.dump deserialization CVSS 4.0MEDIUM 5.3
  • TI-2026-79261 SQL injection in mem0 Databricks Vector Store CVSS 4.0CRITICAL 9.2
  • TI-2026-80584 Cross-tenant conversation leak in Mem0 session scope keys CVSS 3.1MEDIUM 6.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences