CVE-2026-116575 Details
Description
Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join caller-controlled user_id, agent_id, and run_id values using unescaped & and = delimiters. A caller can embed another scope component in a controlled identifier so that distinct tenant tuples produce the same session_scope key. Memory.add(), AsyncMemory.add(), and the REST POST /memories flow use that key to read and save recent raw messages, allowing cross-tenant conversation disclosure and eviction or interleaving of another tenant's history. This issue is fixed in Python SDK 2.0.18 and TypeScript SDK 3.1.6.
A vulnerability in the Mem0 Python SDK prior to version 2.0.18 and the TypeScript SDK prior to version 3.1.6 allows for cross-tenant conversation leaks. The issue arises in the session scope key construction, where user-controlled identifiers are joined using unescaped delimiters. This flaw enables an attacker to craft a scope key that collides with that of another tenant, leading to unauthorized access to their conversation history. The vulnerability is present in the session scope building function, which is used to manage conversation history through the application's memory layer.
Users can upgrade to the Mem0 Python SDK version 2.0.18 or the TypeScript SDK version 3.1.6 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Oct 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/mem0ai/mem0/commit/71f2ebefa3494da21550fb525216818776cde67f | [email protected] | Source CodeVendor |
| https://github.com/mem0ai/mem0/pull/6892 | [email protected] | Source CodeVendor |
| https://github.com/mem0ai/mem0/releases/tag/ts-v3.1.6 | [email protected] | Release NotesVendor |
| https://github.com/mem0ai/mem0/releases/tag/v2.0.18 | [email protected] | Release NotesVendor |
| https://github.com/mem0ai/mem0/security/advisories/GHSA-5324-3w58-qpp2 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mem0ai mem0 | <= 2.0.0 (semver) <= 3.0.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 27, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |