TI-2026-79261 Aliases CVE-2026-115324 GHSA-7587-9684-52r6

SQL injection in mem0 Databricks Vector Store

MEDIUM 42CWE-89Published 2026-10-22 · Updated 2026-10-29

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Attack requirements: Present
Impact type: SQL injection
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-89.

Summary

mem0 from 0.1.117 before 1.0.8 contains an SQL injection flaw (CWE-89) in its Databricks vector store, where memory text, metadata, or message names are interpolated into SQL without escaping. An unauthenticated remote attacker can influence stored memory content to inject SQL that runs on the configured Databricks SQL warehouse.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string interpolation to execute injected SQL on the configured Databricks SQL warehouse.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00322 25th percentileScored 2026-11-07

Fix Fixed mem0 (mem0ai): 1.0.8mem0ai (PyPI): 1.0.8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
mem0ai	mem0	0.1.117 to before 1.0.8	1.0.8	Patch available	CNA
—	mem0ai (PyPI)	0.1.117 to before 1.0.8	1.0.8	Patch available	GHSA-7587-9684-52r6

mem0 Vendormem0ai Affected 0.1.117 to before 1.0.8 Fixed in 1.0.8 Patch available CNA
mem0ai (PyPI) Vendor— Affected 0.1.117 to before 1.0.8 Fixed in 1.0.8 Patch available GHSA-7587-9684-52r6

Remediation

Upgrade mem0 to version 1.0.8, which fixes the issue in the affected range.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Fix · CNA mem0 (mem0ai) Fixed in 1.0.8
Fix · GHSA-7587-9684-52r6 mem0ai (PyPI) Fixed in 1.0.8 Advisory →

Timeline

2026-10-22 Threatist record created from CVE-2026-115324
2026-10-22 Alias added: GHSA-7587-9684-52r6
2026-10-23 Fix available: PyPI/[email protected] · GHSA-7587-9684-52r6
2026-10-23 CVSS score added · GHSA-7587-9684-52r6
2026-10-23 Weakness changed · GHSA-7587-9684-52r6
2026-10-23 7 new references · GHSA-7587-9684-52r6
2026-10-29 CISA SSVC decision points changed

References

Patch 2

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-115324

Other 4

TI-2026-36793 Mem0 0.2.8 Missing Authorization via POST /configure Endpoint CVSS 4.0HIGH 8.6
TI-2026-06680 mem0ai mem0 faiss.py pickle.dump deserialization CVSS 4.0MEDIUM 5.3
TI-2026-80584 Cross-tenant conversation leak in Mem0 session scope keys CVSS 3.1MEDIUM 6.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences