Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-59163— Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

Quick assessment

Affected
AxDSan mnemosyne
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mnemosyne 是用于人工智能代理的记忆层。在 v3.10.1 版本之前， 中的身份验证检查通过 Base64 解码解析 JWT 的头部和载荷，随后将令牌传递给一个 JWT 库调用，但其配置实际上禁用了签名验证。因此，服务器会接受任何格式正确的令牌，而不管其签名如何，包括算法为 的令牌以及使用错误密钥签名的令牌。 v3.10.1 版本中的修复方案是用一个仅使用 Python 标准库编写的、从零开始的 HS256 验证器，替代了原有存在缺陷的解码逻辑。 对于暂时无法立即升级的用户，建议将同步服务端点的网络访问限制

CVSS 9.1 · Critical EPSS 0.25% · P17

Possible ATT&CK Techniques 1 AI

T1557 · Adversary-in-the-Middle

Affected Version Matrix 1

VendorProduct Version RangeStatus
AxDSan mnemosyne < 3.10.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-59163

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass
Source: CVE Program / CVE List V5
Vulnerability Description
Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_server.py parsed the JWT's header and payload using base64 decoding, then passed the token to a jwt library call with options that effectively disabled signature verification. The server accepted any well-formed token regardless of the signature, including tokens with alg: none and tokens signed with the wrong key. The fix in v3.10.1 replaces the broken decode with a from-scratch HS256 verifier using only the Python standard library. For users who cannot upgrade immediately, restrict network access to the sync server endpoint to trusted clients only. Firewall, reverse proxy with mTLS, or localhost bind with SSH tunnel are all viable. The vulnerability is not exploitable against an unreachable endpoint.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
密码学签名的验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
AxDSan mnemosyne < 3.10.1 -

II. Public POCs for CVE-2026-59163

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-59163

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-59163 (2)

Other References for CVE-2026-59163 (2)

IV. Related Vulnerabilities

Same weakness: CWE-347

V. Comments for CVE-2026-59163

No comments yet

Leave a comment