Is CVE-2026-31243 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-31243 being exploited in the wild.

How severe is CVE-2026-31243?

Medium severity, with a CVSS score of 6.5, published 12 May 2026.

Is there a fix for CVE-2026-31243?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-31243 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-31243?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-31243: mem0 server missing authentication in DELETE memories endpoint

CVE-2026-31243 · Severity: medium · CVSS 6.5 · Published 2026-05-12

A vulnerability exists in the mem0 server, a tool used to provide memory layers for AI agents. An unauthenticated user can remotely trigger a command that resets the system's memory and recreates database tables. This can lead to total data loss, disruption of AI services, and a complete denial of service for the memory management platform.

Quick answers

Is CVE-2026-31243 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-31243 being exploited in the wild.
How severe is CVE-2026-31243?: Medium severity, with a CVSS score of 6.5, published 12 May 2026.
Which products and versions are affected?: mem0ai mem0 1.0.0.
Is there a fix for CVE-2026-31243?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-31243 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-31243?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The mem0 1.0.0 server is vulnerable to missing authentication (CWE-306) and missing authorization (CWE-862) on its 'DELETE /memories' endpoint. An unauthenticated remote attacker can send a DELETE request to this endpoint, which triggers a memory reset operation. This operation executes a 'CREATE TABLE' SQL statement, causing existing tables to be dropped or recreated. This results in schema disruption, permanent data loss, and a denial of service (DoS) for the memory management service. The attack requires no special privileges or user interaction.

Affected products

mem0ai mem0 1.0.0

Timeline

2026-05-12: disclosed
2026-05-12: advisory
2026-05-13: other: CISA-ADP enrichment added CVSS and CWE data

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.