mem0 vulnerabilities

2 known vulnerabilities in mem0 from Mem0ai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  mem0: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-115324Oct 22, 2026Mem0ai

  mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unes

• 8.1 High severity

  mem0: Missing Authorization

  CVE-2026-49948Jun 9, 2026Mem0ai

  Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configuration but only verifies authentication