CVE-2026-75110: Incorrect Comparison in MemTensor MemOS
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header also yields None, so the comparison None == None evaluates true. The request is then treated as a trusted internal principal and granted scopes: ["all"]. As a result, an unauthenticated remote attacker can reach the admin API-key management endpoints to mint API keys for any user, enumerate keys, revoke keys, and generate a master key for persistent privileged access, as well as all data endpoints.
AI Analysis
Technical Summary
MemOS uses an environment variable INTERNAL_SERVICE_SECRET to authenticate internal requests. If authentication is enabled (AUTH_ENABLED=true) but INTERNAL_SERVICE_SECRET is not set, the is_internal_request() function compares None to None when the X-Internal-Service header is missing, resulting in a true evaluation. This causes the system to treat unauthenticated external requests as trusted internal principals, granting full administrative scopes including API key management and data access. This vulnerability affects MemOS versions up to and including 2.0.30 and has a CVSS 4.0 score of 9.3, indicating critical severity.
Potential Impact
An unauthenticated remote attacker can bypass internal request authentication controls, gaining full administrative privileges. This includes minting API keys for any user, enumerating and revoking keys, generating a master key for persistent access, and accessing all data endpoints. The vulnerability effectively allows complete compromise of the MemOS deployment.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, ensure the INTERNAL_SERVICE_SECRET environment variable is properly set when AUTH_ENABLED=true to prevent the authentication check from failing open.
CVE-2026-75110: Incorrect Comparison in MemTensor MemOS
Description
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header also yields None, so the comparison None == None evaluates true. The request is then treated as a trusted internal principal and granted scopes: ["all"]. As a result, an unauthenticated remote attacker can reach the admin API-key management endpoints to mint API keys for any user, enumerate keys, revoke keys, and generate a master key for persistent privileged access, as well as all data endpoints.
CVSS v4.0
Score 9.3critical
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
MemOS uses an environment variable INTERNAL_SERVICE_SECRET to authenticate internal requests. If authentication is enabled (AUTH_ENABLED=true) but INTERNAL_SERVICE_SECRET is not set, the is_internal_request() function compares None to None when the X-Internal-Service header is missing, resulting in a true evaluation. This causes the system to treat unauthenticated external requests as trusted internal principals, granting full administrative scopes including API key management and data access. This vulnerability affects MemOS versions up to and including 2.0.30 and has a CVSS 4.0 score of 9.3, indicating critical severity.
Potential Impact
An unauthenticated remote attacker can bypass internal request authentication controls, gaining full administrative privileges. This includes minting API keys for any user, enumerating and revoking keys, generating a master key for persistent access, and accessing all data endpoints. The vulnerability effectively allows complete compromise of the MemOS deployment.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, ensure the INTERNAL_SERVICE_SECRET environment variable is properly set when AUTH_ENABLED=true to prevent the authentication check from failing open.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-17T17:28:41.677Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a837219bf8831d539891c7d
Added to database: 08/17/2026, 20:42:01 UTC
Last enriched: 08/17/2026, 20:56:36 UTC
Last updated: 08/18/2026, 01:37:53 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.