Lucene search
+L

2 matches found

Veracode
Veracode
•added 2026/10/29 3:45 a.m.•9 views

Mem0: Cross-tenant Conversation Leak Via Unescaped Delimiter Collision In Session-scope Key (_build_session_scope)

Summary buildsessionscope in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the last N raw messages by naively joining caller-supplied userid/agentid/runid values with unescaped & and = delimiters: def buildsessionscopefilters: parts = for key in sorted"userid",...

6.3CVSS5.7AI score0.00108EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/28 9:17 p.m.•12 views

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

Summary buildsessionscope in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the last N raw messages by naively joining caller-supplied userid/agentid/runid values with unescaped & and = delimiters: def buildsessionscopefilters: parts = for key in sorted"userid",...

6.3CVSS5.7AI score0.00108EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder