All 5 CVE vulnerabilities found in mem0, with AI-generated Chinese analysis, references, and POCs.
Vendor: mem0ai
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-115324 | mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store CWE-89 | 8.1 | High | 2026-10-22 |
| CVE-2026-59705 | mem0 - OpenMemory API Unauthenticated Access via Memory Endpoints CWE-306 | 9.8 | Critical | 2026-07-07 |
| CVE-2026-59706 | mem0 - Unauthenticated Config API Exposure and SSRF via ollama_base_url CWE-306 | 9.3 | Critical | 2026-07-07 |
| CVE-2026-49948 | Mem0 0.2.8 Missing Authorization via POST /configure Endpoint CWE-862 | 8.1 | High | 2026-06-09 |
| CVE-2026-7597 | mem0ai mem0 faiss.py pickle.dump deserialization CWE-502 | 6.3 | Medium | 2026-05-01 |
All 5 known CVE vulnerabilities affecting mem0 with full Chinese analysis, references, and POCs where available.