CVE-2026-31243

6.5 Moyenne

Publiée le 12/05/2026 à 20:16 · Modifiée le 20/10/2026 à 00:10 · Analysée par le NVD · Source : cve@mitre.org

Description

The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint. An unauthenticated attacker can send a DELETE request that triggers a reset operation, leading to the execution of a CREATE TABLE SQL statement. This can cause unexpected table re-creation, schema disruption, potential data loss, and denial of service for the memory management service.

Traduire en français

Produits concernés

Mem0 mem0

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L`

Faiblesses (CWE)

CWE-306
CWE-862

Références

https://github.com/mem0ai/mem0 Product
https://www.notion.so/CVE-2026-31243-35d1e139318881c6a6cffbe366c238a6 MitigationThird Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories