Lucene search
+L

5 matches found

PyPA
PyPA
•added 2026/07/13 3:02 p.m.•23 views

mem0ai mem0 has an Improper Input Validation Issue

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vectorstores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used...

6.5CVSS5.9AI score0.00431EPSS
SaveExploits0References10Affected Software1
CVE
CVE
•added 2026/05/01 9:15 p.m.•70 views

CVE-2026-7597

The CVE-2026-7597 vulnerability affects mem0ai mem0 up to version 1.0.11, specifically the pickle.load/pickle.dump path in mem0/vector_stores/faiss.py. An attacker can trigger deserialization remotely via manipulation of pickle operations. Public exploit details exist per the sources. The patch i...

6.5CVSS5.9AI score0.00431EPSS
SaveExploits0References7
Mend
Mend
•added 2026/05/01 9:15 p.m.•5 views

CVE-2026-7597

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vectorstores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used...

6.5CVSS5.9AI score0.00431EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•47 views

PT-2026-36549

Name of the Vulnerable Software and Affected Versions mem0ai mem0 versions prior to 1.0.12 Description An unsafe deserialization issue exists in the pickle.load and pickle.dump functions within the mem0/vector stores/faiss.py file. This allows a remote attacker to perform a manipulation that...

6.5CVSS6.5AI score0.00431EPSS
SaveExploits0References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/01 12:00 a.m.•4 views

CVE-2026-7597: Deserialization of Untrusted Data

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vectorstores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used...

6.5CVSS5.9AI score0.00431EPSS
SaveExploits0References3
Rows per page
Query Builder