Vulnerabilities

TI-2026-36853 CVE-2026-50027 · GHSA-84hp-mqvj-3p8h

mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

MEDIUM 51

mcp-memory-service is a semantic memory layer for AI applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00959 Published 2026-08-14 Fixed in 10.67.1 CWE-306

TI-2026-36477 CVE-2026-49291 · GHSA-2r68-g678-7qr3

LOW 38

mcp-memory-service is a semantic memory layer for AI applications.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00488 Published 2026-06-19 Fixed in 10.65.3 CWE-862

TI-2026-25457 CVE-2026-33010 · GHSA-g9rg-8vq5-mpwm

HIGH 73

mcp-memory-service is an open-source memory backend for multi-agent systems.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00403 Published 2026-03-20 Fixed in 10.25.1 CWE-942

TI-2026-23373 CVE-2026-29787 · GHSA-73hc-m4hx-79pj

MEDIUM 63

mcp-memory-service is an open-source memory backend for multi-agent systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00411 Published 2026-03-07 Fixed in 10.21.0 CWE-200