mem0ai has 6 CVEs on record. Disclosures have slowed: 2 in the last 90 days after 4 in the 90 before. The busiest recent month was May 2026 with 4. The median CVSS is 6.4 (medium). None have a confirmed exploitation report. Most affected products: mem0ai (5), mem0 (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.4
- Publish → KEV
- —
- Last 90 days
- 2 prev 4
Worst active — by depth score
CVE-2026-115324High· 8.1mem0ai Databricks vector store vulnerable to SQL injection45CVE-2026-31240High· 7.5mem0 server lacks authentication and authorization controls for its memory management API endpoints41CVE-2026-31241Medium· 6.5mem0 server lacks authentication and authorization controls for its memory deletion API endpoint36CVE-2026-116575Medium· 6.3Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)35CVE-2026-7597Medium· 6.3mem0ai mem0 has an Improper Input Validation Issue35
mem0ai vulnerabilities
CVEs affecting mem0ai, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-116575Medium· 6.3Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join c…
CVE-2026-115324High· 8.1mem0ai Databricks vector store vulnerable to SQL injection
mem0ai Databricks vector store vulnerable to SQL injection
CVE-2026-31240High· 7.5mem0 server lacks authentication and authorization controls for its memory management API endpoints
mem0 server lacks authentication and authorization controls for its memory management API endpoints
CVE-2026-31241Medium· 6.5mem0 server lacks authentication and authorization controls for its memory deletion API endpoint
mem0 server lacks authentication and authorization controls for its memory deletion API endpoint
CVE-2026-31245Medium· 5.3mem0 server lacks authentication and authorization controls for its memory creation API endpoint
mem0 server lacks authentication and authorization controls for its memory creation API endpoint
CVE-2026-7597Medium· 6.3mem0ai mem0 has an Improper Input Validation Issue
mem0ai mem0 has an Improper Input Validation Issue