CVE-2026-49948 describes a missing authorization vulnerability in mem0 versions up to 0.2.8. The vulnerability exists in the self-hosted server's POST /configure endpoint, which modifies global LLM provider and embedder settings. Authentication is verified only by JWT or X-API-Key, but the endpoint does not validate the caller's role or permissions. Consequently, any authenticated user holding a distributed API key can alter the configuration to redirect traffic to an attacker-controlled server. The malicious configuration is stored persistently in PostgreSQL and remains effective after server restarts, impacting all users and API keys on the affected instance. The vulnerability has a CVSS 4.0 score of 8.6 (high severity). No official patch or remediation guidance is currently provided.

An attacker with any distributed API key can modify the global configuration of LLM providers and embedders, redirecting all related traffic to a malicious server. This compromises the integrity and confidentiality of data processed by the mem0 instance. The malicious configuration persists in the database and survives server restarts, affecting all users and API keys on the instance, potentially leading to widespread compromise within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict distribution of API keys to trusted users only and monitor for unauthorized configuration changes. Consider isolating the mem0 instance to limit exposure. Do not rely solely on authentication tokens without role-based authorization checks for sensitive configuration endpoints.