Lucene search
+L

1 matches found

OSV
OSV
added 3 days ago3 views

CVE-2026-75110 MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTHENABLED=true but the undocumented, defaultless INTERNALSERVICESECRET environment variable is unset, the isinternalrequest check in src/memos/api/middleware/auth.py fails open:...

9.3CVSS5.6AI score
SaveExploits0References6
Rows per page
Query Builder