The vulnerability in vmDeshpande ai-agent-automation (before version 0.9.1) exists because the backend memory controller functions (listMemories, deleteMemory, clearAgentMemory) use caller-supplied agentId or memory _id parameters without verifying that these records belong to the authenticated user (req.user). This missing authorization check (CWE-862) enables an authenticated attacker who knows or obtains another user's identifiers to read sensitive AgentMemory content (conversation history, agent context, task data, embeddings, metadata), delete individual memories, or clear all memories of a victim agent. This breaks tenant isolation and leads to confidentiality and integrity violations. The vulnerability has a CVSS 3.1 score of 8.8 (high severity) and was fixed in version 0.9.1.

An authenticated attacker can bypass authorization controls to access or delete another user's agent memory data, resulting in unauthorized disclosure of sensitive information and data loss. This compromises tenant isolation, confidentiality, integrity, and availability of agent memory data within the affected platform.

Upgrade to version 0.9.1 or later, where this missing authorization vulnerability is fixed. No other mitigation is required as the vendor has provided an official fix.