Vulnerabilities

TI-2026-80584 CVE-2026-116575 · GHSA-5324-3w58-qpp2

Cross-tenant conversation leak in Mem0 session scope keys

LOW 29

Mem0 provides persistent memory infrastructure for AI agents and applications.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00108 Published 2026-10-26 Fixed in 2.0.18, 3.1.6 CWE-200

TI-2026-79261 CVE-2026-115324 · GHSA-7587-9684-52r6

SQL injection in mem0 Databricks Vector Store

MEDIUM 42

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00322 Published 2026-10-22 Fixed in 1.0.8 CWE-89

TI-2026-36793 CVE-2026-49948 · GHSA-hp66-92p5-jh23

Mem0 0.2.8 Missing Authorization via POST /configure Endpoint

HIGH 72

Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configu…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.0029 Published 2026-06-09 Fixed CWE-862

TI-2026-06680 CVE-2026-7597 · GHSA-xqxw-r767-67m7

mem0ai mem0 faiss.py pickle.dump deserialization

MEDIUM 57

A vulnerability was found in mem0ai mem0 up to 1.0.11.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00315 Published 2026-05-01 Fixed in 2.0.0b2 CWE-20

Vulnerabilities

Filters

Cross-tenant conversation leak in Mem0 session scope keys

SQL injection in mem0 Databricks Vector Store

Mem0 0.2.8 Missing Authorization via POST /configure Endpoint

mem0ai mem0 faiss.py pickle.dump deserialization