actbench (0.0.1a5), browser-use (>=0.1.42, <=0.2.5) +4 more potentially affected by CVE-2026-7597 via mem0ai (0.1.93)

mem0ai PYPI version 0.1.93 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - actbench 0.0.1a5 - browser-use =0.1.42, =0.1.13, =0.1.7, =0.1.3, =0.1.48, =0.2.2 Source cves: CVE-2026-7597 Source advisory: OSV:PYSEC-2026-2636...

embedchain (>=0.1.117, <=0.1.118) potentially affected by CVE-2026-7597 via mem0ai (0.0.5)

mem0ai PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - embedchain =0.1.117, =0.1.118 Source cves: CVE-2026-7597 Source advisory: OSV:PYSEC-2026-2636...

graphtomation (>=0.0.3, <=0.0.4) potentially affected by CVE-2026-7597 via mem0ai (0.1.41)

mem0ai PYPI version 0.1.41 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - graphtomation =0.0.3, =0.0.4 Source cves: CVE-2026-7597 Source advisory: OSV:PYSEC-2026-2636...

graphtomation (0.0.5) potentially affected by CVE-2026-7597 via mem0ai (0.1.42)

mem0ai PYPI version 0.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - graphtomation 0.0.5 Source cves: CVE-2026-7597 Source advisory: OSV:PYSEC-2026-2636...

mcp-validator (0.1.1) potentially affected by CVE-2026-7597 via mem0ai (0.1.113)

mem0ai PYPI version 0.1.113 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - mcp-validator 0.1.1 Source cves: CVE-2026-7597 Source advisory: OSV:PYSEC-2026-2636...

eidolon-ai-sdk (>=0.1.108, <=0.1.184), embedchain (>=0.1.119, <=0.1.120) +2 more potentially affected by CVE-2026-7597 via mem0ai (0.0.9)

mem0ai PYPI version 0.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - eidolon-ai-sdk =0.1.108, =0.1.119, =0.1.120a1, =0.1.120, =0.1.120.10 Source cves: CVE-2026-7597 Source advisory: OSV:PYSEC-2026-2636...

actbench (0.0.1a5), browser-use (>=0.1.42, <=0.2.5) +4 more potentially affected by CVE-2026-7597 via mem0ai (0.1.93)

mem0ai PYPI version 0.1.93 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - actbench 0.0.1a5 - browser-use =0.1.42, =0.1.13, =0.1.7, =0.1.3, =0.1.48, =0.2.2 Source cves: CVE-2026-7597 Source advisory: OSV:GHSA-XQXW-R767-67M...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-7597 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-7597 Source advisory: OSV:GHSA-XQXW-R767-67M7...

lpw (0.2.5.0) potentially affected by CVE-2026-7597 via mem0ai (0.1.34)

mem0ai PYPI version 0.1.34 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - lpw 0.2.5.0 Source cves: CVE-2026-7597 Source advisory: OSV:GHSA-XQXW-R767-67M7...

agent-framework-mem0 (>=1.0.0b260319, <=1.0.0b260609), engramd (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2026-7597 via mem0ai (1.0.11)

mem0ai PYPI version 1.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - agent-framework-mem0 =1.0.0b260319, =0.1.0, =0.3.0, =0.1.0b0, =0.2.0, =1.0.0.6, =1.0.6.10 Source cves: CVE-2026-7597 Source advisory:...

graphtomation (>=0.0.3, <=0.0.4) potentially affected by CVE-2026-7597 via mem0ai (0.1.41)

mem0ai PYPI version 0.1.41 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - graphtomation =0.0.3, =0.0.4 Source cves: CVE-2026-7597 Source advisory: OSV:GHSA-XQXW-R767-67M7...

mcp-validator (0.1.1) potentially affected by CVE-2026-7597 via mem0ai (0.1.113)

mem0ai PYPI version 0.1.113 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - mcp-validator 0.1.1 Source cves: CVE-2026-7597 Source advisory: OSV:GHSA-XQXW-R767-67M7...

CVE-2026-7597

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vectorstores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used...

CVE-2026-7597 mem0ai mem0 faiss.py pickle.dump deserialization

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vectorstores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used...