---
id: CVE-2026-59163
title: Mnemosyne is a memory layer for artificial intelligence agents
summary: >-
  Mnemosyne is a memory layer for artificial intelligence agents. Prior to
  v3.10.1, the auth check in mnemosyne/core/sync_server.py parsed the JWT's
  header and payload using base64 decoding, then passed the token to a jwt
  library call with…
severity: critical
cvss: 9.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-347
vendor: mnemosyne-memory
product: mnemosyne-memory
affected:
  - mnemosyne-memory <= 3.10.0
patched:
  - mnemosyne-memory 3.10.1
published: '2026-09-18'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T21:25:27.050'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-59163'
references:
  - url: >-
      https://github.com/mnemosyne-oss/mnemosyne/commit/a0b6b8711a1a485304971710dc3571e29ff9dbeb
    label: security-advisories@github.com
  - url: 'https://github.com/mnemosyne-oss/mnemosyne/pull/373'
    label: security-advisories@github.com
  - url: 'https://github.com/mnemosyne-oss/mnemosyne/releases/tag/v3.10.1'
    label: security-advisories@github.com
  - url: >-
      https://github.com/mnemosyne-oss/mnemosyne/security/advisories/GHSA-xcw4-53cc-hv32
    label: security-advisories@github.com
  - url: >-
      https://github.com/mnemosyne-oss/mnemosyne/security/advisories/GHSA-xcw4-53cc-hv32
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://github.com/AxDSan/mnemosyne/security/advisories/GHSA-xcw4-53cc-hv32
  - url: 'https://github.com/advisories/GHSA-xcw4-53cc-hv32'
  - url: 'https://github.com/AxDSan/mnemosyne'
tags:
  - nvd
  - ghsa
  - pip
  - cve.org
  - exploit-available
  - osv
epss: 0.00325
epssPercentile: 0.22903
aliases:
  - GHSA-xcw4-53cc-hv32
ecosystem: pip
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-09-18T18:01:41.352974Z'
ingestedAt: '2026-09-18T18:47:53.263Z'
---

## Overview

Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_server.py parsed the JWT's header and payload using base64 decoding, then passed the token to a jwt library call with options that effectively disabled signature verification. The server accepted any well-formed token regardless of the signature, including tokens with alg: none and tokens signed with the wrong key. The fix in v3.10.1 replaces the broken decode with a from-scratch HS256 verifier using only the Python standard library. For users who cannot upgrade immediately, restrict network access to the sync server endpoint to trusted clients only. Firewall, reverse proxy with mTLS, or localhost bind with SSH tunnel are all viable. The vulnerability is not exploitable against an unreachable endpoint.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-59163)

Affected packages:

- `mnemosyne-memory <= 3.10.0`

Patched in:

- `mnemosyne-memory 3.10.1`

Source: https://github.com/advisories/GHSA-xcw4-53cc-hv32