mem0ai vulnerabilities
CVEs whose affected-version data names the mem0ai package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-116575Medium· 6.3Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
▾ Sunlitmem0ai · mem0aiEPSS 0.11%via OSV
CVE-2026-115324High· 8.1mem0ai Databricks vector store vulnerable to SQL injection
mem0ai Databricks vector store vulnerable to SQL injection
▾ Twilightmem0ai · mem0aiEPSS 0.32%via OSV
CVE-2026-31240High· 7.5mem0 server lacks authentication and authorization controls for its memory management API endpoints
mem0 server lacks authentication and authorization controls for its memory management API endpoints
▾ Twilightmem0ai · mem0aiEPSS 0.37%via OSV
CVE-2026-31241Medium· 6.5mem0 server lacks authentication and authorization controls for its memory deletion API endpoint
mem0 server lacks authentication and authorization controls for its memory deletion API endpoint
▾ Sunlitmem0ai · mem0aiEPSS 0.39%via OSV
CVE-2026-31245Medium· 5.3mem0 server lacks authentication and authorization controls for its memory creation API endpoint
mem0 server lacks authentication and authorization controls for its memory creation API endpoint
▾ Sunlitmem0ai · mem0aiEPSS 0.34%via OSV
CVE-2026-7597Medium· 6.3mem0ai mem0 has an Improper Input Validation Issue
mem0ai mem0 has an Improper Input Validation Issue
▾ Sunlitmem0ai · mem0aiEPSS 0.32%via OSV