Security1 hOctober 29, 2026, 19:30

Mem0 flaw lets attackers read other tenants' AI conversations

CVE-2026-116575 (CVSS 6.3) in the Mem0 memory platform for AI agents lets attackers inject '=' and '&' delimiters into user_id, agent_id or run_id to collide with another tenant's session scope key. Python SDK before 2.0.18 and TypeScript SDK before 3.1.6 are affected; the fix percent-encodes the delimiters.

DEV Community

Open source

CVSS 6.3, CWE-863 and CWE-200, published October 28, 2026
Affects mem0ai < 2.0.18 and mem0-ts < 3.1.6
Exploit enables cross-tenant disclosure, poisoning and eviction
Patch escapes %, & and = in session scope keys

#Mem0

Critical PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory

Security

Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data

Security

Codex Desktop flaw let untrusted code read auth tokens from shared memory

Security

Mem0 flaw lets attackers read other tenants' AI conversations

Critical PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory

Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data

Codex Desktop flaw let untrusted code read auth tokens from shared memory

Telegram Android flaw let attackers run code on answered voice calls