CVE-2026-59706 Details
Description
mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forgery via attacker-controlled ollama_base_url parameter. Unauthenticated attackers can retrieve stored secrets like OpenAI API keys via GET /api/v1/config/ or trigger SSRF attacks by setting ollama_base_url to internal addresses like cloud IMDS via PUT /api/v1/config/mem0/llm endpoint.
A vulnerability in Mem0's configuration API endpoints allows unauthenticated access to sensitive data and introduces a server-side request forgery (SSRF) risk. The issue arises from the absence of authentication on critical endpoints, which enables attackers to retrieve exposed LLM API keys and manipulate internal server requests. Specifically, the PUT /api/v1/config/mem0/llm endpoint can be exploited by directing the ollama_base_url parameter to internal addresses, such as the cloud's Instance Metadata Service (IMDS). Additionally, the GET /api/v1/config/ endpoint reveals stored API keys in plaintext.
It is recommended to require authentication for all /api/v1/config/ endpoints, implement a scheme and IP range allowlist for the ollama_base_url parameter, and avoid storing LLM API keys in the configuration database, opting for environment-variable references instead.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 7, 2026CISA-ADP
Assessed Jul 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/mem0ai/mem0/issues/6081 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/mem0ai/mem0 | [email protected] | Source CodeVendor |
| https://github.com/mem0ai/mem0/commit/a3154d59e52386d4e1189c1f5f44819868f76514 | [email protected] | Source CodeVendor |
| https://github.com/mem0ai/mem0/issues/6081 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/mem0-server-side-request-forgery-and-plaintext-api-key-exposure-via-unauthenticated-config-endpoints | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mem0ai mem0 | <= a3154d5 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | CVE Modified | CISA-ADP |
| Jul 7, 2026 | New CVE Received | [email protected] |