CVE-2026-6634

UseMemoS memos up to 0.22.1 has a vulnerability in the UpdateInstanceSetting component, specifically the memos_access_token function in src/App.tsx. The issue stems from manipulation of the additionalStyle/additionalScript arguments, leading to improper authorization. Exploitation is possible rem...

CVE-2026-6634: Improper Authorization

A weakness has been identified in usememos memos up to 0.22.1. This affects the function memosaccesstoken of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be...