Is CVE-2026-31245 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-31245 being exploited in the wild.

How severe is CVE-2026-31245?

Medium severity, with a CVSS score of 5.3, published 12 May 2026.

Which products and versions are affected?

mem0ai (PyPI) <= 1.0.0, ECOSYSTEM:introduced=0,last_affected=1.0.0.

Is there a fix for CVE-2026-31245?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-31245 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-31245?

Check whether you run mem0ai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-31245: mem0ai mem0 missing authentication in memory creation API

Q: Which products and versions are affected?

mem0ai (PyPI) <= 1.0.0, ECOSYSTEM:introduced=0,last_affected=1.0.0.

Q: Is there a fix for CVE-2026-31245?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-31245 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-31245?

Check whether you run mem0ai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-31245 · Severity: medium · CVSS 5.3 · Published 2026-05-12

Mem0 is a memory layer used by AI agents to store and retrieve information. A security flaw in the Mem0 server allows anyone on the network to add new information to the database without providing a password or identity. This could allow an attacker to inject false or malicious data into an AI's memory, potentially corrupting its decision-making or polluting the system's data.

Technologies: mem0ai (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-31245 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-31245 being exploited in the wild.
How severe is CVE-2026-31245?: Medium severity, with a CVSS score of 5.3, published 12 May 2026.
Which products and versions are affected?: mem0ai (PyPI) <= 1.0.0, ECOSYSTEM:introduced=0,last_affected=1.0.0.
Is there a fix for CVE-2026-31245?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-31245 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-31245?: Check whether you run mem0ai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The mem0 server (version 1.0.0 and earlier) contains a vulnerability where the 'POST /memories' API endpoint does not implement authentication or authorization checks (CWE-306, CWE-862). A remote, unauthenticated attacker can send crafted HTTP POST requests to this endpoint to create new memory records. This allows for unauthorized data injection and data pollution within the database used by AI agents. The vulnerability is exploitable over the network with low complexity and requires no user interaction. As of the advisory date, no patched version has been identified.

Affected products

mem0ai mem0ai <= 1.0.0

Identifiers

CVE-2026-31245
GHSA-cgx8-qgvr-f7vf
PYSEC-2026-2633

Timeline

2026-05-12: advisory: GHSA-cgx8-qgvr-f7vf published
2026-05-12: disclosed: CVE-2026-31245 assigned

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.