CVE-2026-49291 Details
Description
mcp-memory-service is a semantic memory layer for AI applications. Prior to version 10.65.3, the HTTP MCP JSON-RPC endpoint at `/mcp` requires only OAuth `read` scope for all requests, then dispatches `tools/call` directly to handlers that include mutating tools. A read-only OAuth client can call `store_memory` and `delete_memory` through MCP even though the corresponding REST endpoints require `write` scope. Version 10.65.3 patches the issue.
A vulnerability exists in mcp-memory-service, a semantic memory layer for AI applications, prior to version 10.65.3. The issue arises because the HTTP MCP JSON-RPC endpoint at '/mcp' only requires OAuth 'read' scope for all requests. This misconfiguration allows a read-only OAuth client to directly invoke 'tools/call' handlers that include mutating tools, such as 'store_memory' and 'delete_memory'. In contrast, the corresponding REST endpoints properly require 'write' scope. The vulnerability has been patched in version 10.65.3.
Users can update to mcp-memory-service version 10.65.3 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 19, 2026CISA-ADP
Assessed Jun 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| doobidoo mcp-memory-service | < 10.65.3 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 22, 2026 | CVE Modified | CISA-ADP |
| Jun 19, 2026 | New CVE Received | [email protected] |