Skip to content
OpenAdvisories

Vendor

mem0

2 known vulnerabilities.

Products

mem0 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-59705

    mem0 - OpenMemory API Unauthenticated Access via Memory Endpoints

    mem0's openmemory/api component contains an unauthenticated access vulnerability that allows unauthenticated attackers to read, write, and delete arbitrary user memories by accessing API routers registered without authentication middleware. Attackers can supp…

    mem0 mem0
  • Critical 9.3
    CVE-2026-59706

    mem0 - Unauthenticated Config API Exposure and SSRF via ollama_base_url

    mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forgery via attacker-controlled ollama_base_url parameter. Unauthenticated attackers can retrieve stored secrets like OpenAI API keys via GE…

    mem0 mem0