mem0ai Databricks vector store vulnerable to SQL injection

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vectorstores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert and update string...

GHSA-7587-9684-52R6 mem0ai Databricks vector store vulnerable to SQL injection

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vectorstores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert and update string...

CVE-2026-115324 mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vectorstores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert and update string...

CVE-2026-115324

The mem0 library, versions 0.1.117 before 1.0.8 , is vulnerable to an SQL injection in the mem0/vector_stores/databricks.py component. The root cause is the use of unescaped string interpolation within insert() and update() functions. Attackers can exploit this by supplying crafted memory text, m...

CVE-2026-115324 mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vectorstores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert and update string...