Mem0 Mem0
7 CVEs affecting Mem0 Mem0. Latest disclosed: 2026-07-07. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-59705 | Critical | 9.8 | 2026-07-07 | mem0's openmemory/api component contains an unauthenticated access vulnerability that allows unauthenticated attackers to read, write, and delete arbitrary use… |
CVE-2026-59706 | Critical | 9.3 | 2026-07-07 | mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forgery via attacker-controlled ollama_b… |
CVE-2026-31242 | Critical | 9.1 | 2026-05-12 | The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint. An unau… |
CVE-2026-31244 | Medium | 6.5 | 2026-05-12 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}). The endpoint allows… |
CVE-2026-31243 | Medium | 6.5 | 2026-05-12 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memor… |
CVE-2026-31241 | Medium | 6.5 | 2026-05-12 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories). The endpoint allows unauthentica… |
CVE-2026-31245 | Medium | 5.3 | 2026-05-12 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories). The endpoint allows unauthenticate… |