Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-50027— mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

Quick assessment

Affected
doobidoo mcp-memory-service
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

doobidoo mcp-memory-service是doobidoo个人开发者开源的一个模型上下文协议服务。 doobidoo mcp-memory-service 10.67.1之前版本存在授权问题漏洞，该漏洞源于/api/documents/*路由未正确实施身份验证，可能导致未经身份验证的远程攻击者上传任意内容、读取存储文档内容以及删除已认证用户的记忆数据。

CVSS 9.8 · Critical EPSS 0.50% · P41

Affected Version Matrix 1

VendorProduct Version RangeStatus
doobidoo mcp-memory-service < 10.67.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-50027

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
Source: CVE Program / CVE List V5
Vulnerability Description
mcp-memory-service is a semantic memory layer for AI applications. Prior to 10.67.1, all HTTP routes under /api/documents/* in mcp-memory-service are served without any authentication dependency, even when the server is configured with an API key (MCP_API_KEY) or OAuth. An unauthenticated remote attacker can upload arbitrary content into the memory store (write), retrieve stored document content (read), and permanently delete memories belonging to authenticated users (delete) — all without supplying any credentials. The /api/memories counterpart correctly enforces authentication, making this an inconsistent and exploitable authentication boundary. This vulnerability is fixed in 10.67.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
doobidoo mcp-memory-service 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
doobidoo mcp-memory-service是doobidoo个人开发者开源的一个模型上下文协议服务。 doobidoo mcp-memory-service 10.67.1之前版本存在授权问题漏洞，该漏洞源于/api/documents/*路由未正确实施身份验证，可能导致未经身份验证的远程攻击者上传任意内容、读取存储文档内容以及删除已认证用户的记忆数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
doobidoo mcp-memory-service < 10.67.1 -

II. Public POCs for CVE-2026-50027

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-50027

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-50027 (1)

Other References for CVE-2026-50027 (1)

IV. Related Vulnerabilities

Same product: mcp-memory-service
Same vendor: doobidoo
Same weakness: CWE-306

V. Comments for CVE-2026-50027

No comments yet

Leave a comment