mem0ai vulnerabilities
CVEs whose affected-version data names the mem0ai package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-31240High· 7.5mem0 server lacks authentication and authorization controls for its memory management API endpoints
mem0 server lacks authentication and authorization controls for its memory management API endpoints
▾ Twilightmem0ai · mem0aiEPSS 0.37%via OSV
CVE-2026-31241Medium· 6.5mem0 server lacks authentication and authorization controls for its memory deletion API endpoint
mem0 server lacks authentication and authorization controls for its memory deletion API endpoint
▾ Sunlitmem0ai · mem0aiEPSS 0.39%via OSV
CVE-2026-31245Medium· 5.3mem0 server lacks authentication and authorization controls for its memory creation API endpoint
mem0 server lacks authentication and authorization controls for its memory creation API endpoint
▾ Sunlitmem0ai · mem0aiEPSS 0.34%via OSV
CVE-2026-7597Medium· 6.3mem0ai mem0 has an Improper Input Validation Issue
mem0ai mem0 has an Improper Input Validation Issue
▾ Sunlitmem0ai · mem0aiEPSS 0.32%via OSV