Skip to content
OpenAdvisories

Vendor

mem0ai

4 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.3

    Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

    Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join caller-controlled user_…

  • Medium 6.3

    mem0ai mem0 faiss.py pickle.dump deserialization

    A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vector_stores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit…