Description
A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vector_stores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 62dca096f9236010ca15fea9ba369ba740b86b7a. Applying a patch is the recommended action to fix this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mem0ai | mem0 | 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | mem0ai | < 2.0.0b2 | 2.0.0b2 | GHSA-xqxw-r767-67m7 |
References
- VDB-360550 | mem0ai mem0 faiss.py pickle.dump deserialization vdb-entry technical-description
- VDB-360550 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #805562 | Mem0 <= v1.0.11 Unsafe Deserialization third-party-advisory
- https://github.com/mem0ai/mem0/issues/3778 exploit issue-tracking
- https://github.com/mem0ai/mem0/pull/4833 issue-tracking patch
- https://github.com/mem0ai/mem0/commit/62dca096f9236010ca15fea9ba369ba740b86b7a patch
- https://github.com/mem0ai/mem0/ product