Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/08/17 8:36 p.m.37 views

CVE-2026-75110 MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTHENABLED=true but the undocumented, defaultless INTERNALSERVICESECRET environment variable is unset, the isinternalrequest check in src/memos/api/middleware/auth.py fails open:...

9.8CVSS0.00516EPSS
SaveExploits0References4
Rows per page
Query Builder