CyberSecBulletin

Mem0ai vulnerabilities

We track 2 vulnerabilities in Mem0ai products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Mem0ai vulnerabilities

  • 8.1 High severity

    mem0: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2026-115324Mem0ai

    mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unes

  • 8.1 High severity

    mem0: Missing Authorization

    CVE-2026-49948Mem0ai

    Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configuration but only verifies authentication