EUVD-2026-29565
GHSA-hfhg-w67x-4fpq
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint. An unauthenticated attacker can send a DELETE request that triggers a reset operation, leading to the execution of a DROP TABLE SQL statement. This results in the deletion of the entire memory database table, causing catastrophic data loss and a complete denial of service for all users of the service.
AnalysisAI
Unauthenticated remote attackers can completely destroy the mem0 v1.0.0 memory database by sending a DELETE request to the /memories endpoint, which executes DROP TABLE SQL statements without authentication or authorization checks. This causes irreversible data loss and total service denial for all users. EPSS score of 0.03% suggests low observed exploitation probability despite the CVSS 9.1 critical rating, likely due to mem0's limited deployment footprint. No public exploit code or active exploitation (CISA KEV) confirmed at time of analysis, but SSVC indicates the vulnerability is automatable with a single HTTP request.
Technical ContextAI
mem0 is a memory management server providing a REST API for storing and managing memory data, likely used in AI/LLM applications based on the project context. The vulnerability stems from CWE-862 (Missing Authorization), where the DELETE /memories endpoint exposes direct database operations without implementing authentication middleware or authorization checks. The endpoint accepts DELETE HTTP requests that map directly to destructive SQL DDL operations (DROP TABLE), bypassing any access control layer. This architectural flaw allows the API to treat anonymous requests as trusted administrative operations, violating the principle that state-changing operations require authenticated identity verification and authorization policy enforcement. The CVSS vector AV:N/AC:L/PR:N/UI:N confirms this is a network-accessible endpoint with no complexity barriers and no privilege requirements.
RemediationAI
Upgrade mem0 to a version newer than v1.0.0 that implements authentication and authorization controls for the DELETE /memories endpoint-however, no specific patched version number is confirmed in available advisories, requiring verification directly with the mem0ai project at https://github.com/mem0ai/mem0 for release notes or security patches. If immediate patching is unavailable, implement network-level access controls to restrict the /memories endpoint to trusted administrative IP addresses only, accepting the trade-off that this breaks legitimate remote administration and creates operational overhead for IP allowlist maintenance. Alternatively, deploy a reverse proxy or API gateway (such as nginx, Kong, or AWS API Gateway) in front of mem0 to enforce authentication tokens on all DELETE requests, though this requires development effort to implement token validation and may introduce latency. As a temporary emergency measure, disable the DELETE /memories endpoint entirely at the web server or load balancer level if memory reset functionality is not operationally required, with the trade-off that legitimate administrative cleanup operations become unavailable. Monitor https://nvd.nist.gov/vuln/detail/CVE-2026-31242 for updated vendor guidance.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today