Mem0ai

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 10
    Known Exploited: 0
    1
    Critical Level Threats
    3
    High Level Threats
    6
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-116575

    Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

    Last Modified: Oct 27, 2026
    Published: Oct 26, 2026

    CVE-2026-115324

    mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026

    CVE-2026-49948

    Mem0 0.2.8 Missing Authorization via POST /configure Endpoint

    Last Modified: Jun 09, 2026
    Published: Jun 09, 2026

    CVE-2026-31243

    The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint. An unauthenticated attacker can send a DELETE request that triggers a reset operation, leading to the execution of a CREATE TABLE SQL statement. This can cause unexpected table re-creation, schema disruption, potential data loss, and denial of service for the memory management service.

    Last Modified: May 14, 2026
    Published: May 12, 2026

    CVE-2026-31241

    Unauthenticated Endpoint Enables Arbitrary Memory Deletion in mem0 1.0.0

    Last Modified: May 14, 2026
    Published: May 12, 2026
    Items Per Page
    Mem0ai Vulnerabilities & Security CVEs | CVE-DB