Skip to content
OpenAdvisories

Vendor

mem0ai

4 known vulnerabilities.

Products

mem0 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-115324

    mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

    mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach une…

    mem0ai mem0 mem0ai PyPI
  • High 8.1
    CVE-2026-49948

    Mem0 0.2.8 Missing Authorization via POST /configure Endpoint

    Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configuration but only verifies authentication…

    mem0ai mem0