CVE-2026-116575

LOWCVSS 6.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join caller-controlled user_id, agent_id, and run_id values using unescaped & and = delimiters. A caller can embed another scope component in a controlled identifier so that distinct tenant tuples produce the same session_scope key. Memory.add(), AsyncMemory.add(), and the REST POST /memories flow use that key to read and save recent raw messages, allowing cross-tenant conversation disclosure and eviction or interleaving of another tenant's history. This issue is fixed in Python SDK 2.0.18 and TypeScript SDK 3.1.6.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-200CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Referenced assets2 URLs

By indicator

Full discourse1 post

ATIK@atikbytes19h
1/ vLLM users: 0.32.0 fixes 8 CVEs published yesterday. The worst (CVE-2026-115912): with the shared-memory multimodal cache on, a logged-in caller can forge a handle so a worker runs pickle.loads() on their bytes. That's code execution, even with insecure serialization turned off. 2/ Also fixed: - An EPS file labelled as a PNG can reach Ghostscript on the host - Untrusted Jinja chat templates with no time or memory limit - Several requests that crash the engine for every user If you share a vLLM server, upgrade to 0.32.0. https://vibevulns.com/advisories/cve-2026-115912-vllm-0-32-pickle-rce-eps-images-and-engine-crashes/ 3/ Building multi-user agents on Mem0? CVE-2026-116575: a run_id like "proj-x&user_id=alice" maps to Alice's session, so one user can read another's recent messages. Fixed in mem0ai 2.0.18 (pip) and 3.1.6 (npm). https://vibevulns.com/advisories/cve-2026-116575-mem0-cross-tenant-conversation-leak/
0000019
661 followersView on X

Explore more

Back to dashboard