EUVD-2026-29564
GHSA-gq6f-qwv9-rf4j
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories). The endpoint allows unauthenticated users to delete memory records by specifying arbitrary user identifiers (e.g., user_id, run_id, agent_id) in the request query parameters. A remote attacker can exploit this by sending unauthenticated DELETE requests to erase memory data for any user, leading to unauthorized data loss and denial of service.
AnalysisAI
mem0 1.0.0 server exposes an unauthenticated memory deletion API endpoint (DELETE /memories) that allows remote attackers to delete arbitrary user memory records by specifying user identifiers in query parameters, resulting in unauthorized data loss and denial of service. No authentication or authorization validation is performed before processing deletion requests, enabling any network-accessible attacker to target any user's data without credentials.
Technical ContextAI
mem0 is a memory management system with a REST API for storing and retrieving user-associated data. The vulnerable DELETE /memories endpoint processes requests containing user identifiers (user_id, run_id, agent_id) as query parameters without implementing CWE-306 (Missing Authentication for Critical Function) controls. The absence of authentication checks means the API layer fails to verify caller identity before authorizing destructive operations. The lack of authorization controls (access control lists or role-based restrictions) further permits any authenticated or unauthenticated caller to delete data belonging to arbitrary users.
RemediationAI
Upgrade mem0 immediately to a patched version released after 1.0.0; contact the vendor or monitor the GitHub repository (https://github.com/mem0ai/mem0) for fix availability. Until a patch is deployed, implement compensating controls: (1) Deploy mem0 behind an authentication gateway (OAuth2/JWT proxy) that validates all requests before forwarding to the API server - this adds latency but prevents unauthenticated access; (2) Apply network segmentation restricting DELETE /memories endpoint access to trusted internal clients only, blocking external requests at the firewall or load balancer - trade-off is reduced flexibility for remote integrations; (3) Disable the DELETE /memories endpoint entirely if deletion is not operationally required, removing the attack surface - verify with stakeholders that data retention policies do not depend on API-driven deletion. Monitor access logs for unusual DELETE requests to /memories as a temporary detection layer.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today