Is CVE-2026-31244 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-31244 being exploited in the wild.

How severe is CVE-2026-31244?

Medium severity, with a CVSS score of 6.5, published 12 May 2026.

Is there a fix for CVE-2026-31244?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-31244 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-31244?

Check whether you run Mem0ai Mem0 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-31244: mem0ai mem0 missing authentication in memory deletion API

CVE-2026-31244 · Severity: medium · CVSS 6.5 · Published 2026-05-12

The mem0 server, which provides a memory layer for AI agents, contains a security flaw that allows anyone on the network to delete stored memory records. Because the system fails to check for user identity or permissions on its deletion interface, an attacker could remotely wipe data from the database. This could lead to significant data loss and disrupt the operations of AI agents relying on that stored information.

Technologies: Mem0ai Mem0. Vendors: Mem0ai.

Quick answers

Is CVE-2026-31244 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-31244 being exploited in the wild.
How severe is CVE-2026-31244?: Medium severity, with a CVSS score of 6.5, published 12 May 2026.
Which products and versions are affected?: Mem0ai Mem0 1.0.0.
Is there a fix for CVE-2026-31244?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-31244 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-31244?: Check whether you run Mem0ai Mem0 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The mem0 1.0.0 server is vulnerable to missing authentication (CWE-306) and missing authorization (CWE-862) within its memory deletion API. Specifically, the 'DELETE /memories/{memory_id}' endpoint does not verify the identity or permissions of the requester. A remote, unauthenticated attacker can exploit this by sending crafted HTTP DELETE requests to remove any memory entry from the database by its ID. This results in unauthorized data modification and a potential denial of service for AI agents that depend on the affected memory records.

Affected products

mem0ai mem0 1.0.0

Timeline

2026-05-12: disclosed: Initial disclosure of CVE-2026-31244
2026-05-12: advisory
2026-05-13: other: CISA-ADP enrichment and CVSS scoring added

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.