Executive brief
Mem0 is a memory layer used by AI agents to store and retrieve user interactions. A security flaw in its self-hosted API component allows anyone on the network to read, modify, or delete private user data without a password. Additionally, an attacker could disable the memory service for all users simultaneously, leading to a complete service outage and loss of sensitive information.
Technical details
A missing authentication vulnerability exists in the OpenMemory self-hosted API (openmemory/api) due to API routers being registered without authentication middleware in main.py. The root cause is a failure to implement CWE-306 (Missing Authentication for Critical Function), where endpoint handlers accept a user_id parameter without verifying the caller's identity or session. Attackers can exploit this by supplying arbitrary user_id values to access private data, or by calling the /api/v1/memories/actions/pause endpoint with global_pause=true to cause a denial-of-service across all tenants. The vulnerability was identified in commit a3154d5 and affects all endpoints including memory retrieval, update, and deletion.
Affected products
- mem0ai mem0ai/mem0 (OpenMemory API) up to and including commit a3154d5
Timeline
- 2026-06-01: disclosed: Vulnerability reported to vendor via email
- 2026-07-03: other: Public GitHub issue opened after no vendor response
- 2026-07-07: advisory: CVE published and VulnCheck advisory released