CVE-2026-31240

The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints. Critical functions such as updating memory records PUT /memories/memoryid are exposed without any verification of the requester's identity or permissions. A remote attacker can exploit...

PT-2026-26179

Name of the Vulnerable Software and Affected Versions mcp-memory-service versions prior to 10.25.1 Description mcp-memory-service is an open-source memory backend for multi-agent systems. When the HTTP server is enabled MCP HTTP ENABLED=true, the application configures FastAPI's CORSMiddleware wi...