CVE-2026-75110: Incorrect Comparison in MemTensor MemOS
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header also yields None, so the comparison None == None evaluates true. The request is then treated as a trusted internal principal and granted scopes: ["all"]. As a result, an unauthenticated remote attacker can reach the admin API-key management endpoints to mint API keys for any user, enumerate keys, revoke keys, and generate a master key for persistent privileged access, as well as all data endpoints.
AI Analysis
Technical Summary
MemOS, a memory operating system for LLMs and AI agents, contains a logic flaw in the is_internal_request() function within src/memos/api/middleware/auth.py. If authentication is enabled (AUTH_ENABLED=true) but the INTERNAL_SERVICE_SECRET environment variable is unset (which is undocumented and has no default), the environment variable check returns None. Since the request header X-Internal-Service is also absent, the comparison None == None evaluates to true, causing the system to treat the request as a trusted internal principal. Consequently, an unauthenticated remote attacker can access admin API-key management endpoints and all data endpoints with full privileges.
Potential Impact
An unauthenticated remote attacker can gain full administrative access to MemOS, including the ability to mint API keys for any user, enumerate and revoke keys, and generate a master key. This leads to persistent privileged access and full control over all data endpoints, posing a severe risk to confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, ensure that the INTERNAL_SERVICE_SECRET environment variable is set properly when authentication is enabled to prevent the is_internal_request() check from failing open.
CVE-2026-75110: Incorrect Comparison in MemTensor MemOS
Description
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header also yields None, so the comparison None == None evaluates true. The request is then treated as a trusted internal principal and granted scopes: ["all"]. As a result, an unauthenticated remote attacker can reach the admin API-key management endpoints to mint API keys for any user, enumerate keys, revoke keys, and generate a master key for persistent privileged access, as well as all data endpoints.
CVSS v4.0
Score 9.3critical
Affected software
MemTensor
MemOS
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
MemOS, a memory operating system for LLMs and AI agents, contains a logic flaw in the is_internal_request() function within src/memos/api/middleware/auth.py. If authentication is enabled (AUTH_ENABLED=true) but the INTERNAL_SERVICE_SECRET environment variable is unset (which is undocumented and has no default), the environment variable check returns None. Since the request header X-Internal-Service is also absent, the comparison None == None evaluates to true, causing the system to treat the request as a trusted internal principal. Consequently, an unauthenticated remote attacker can access admin API-key management endpoints and all data endpoints with full privileges.
Potential Impact
An unauthenticated remote attacker can gain full administrative access to MemOS, including the ability to mint API keys for any user, enumerate and revoke keys, and generate a master key. This leads to persistent privileged access and full control over all data endpoints, posing a severe risk to confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, ensure that the INTERNAL_SERVICE_SECRET environment variable is set properly when authentication is enabled to prevent the is_internal_request() check from failing open.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-17T17:28:41.677Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a837219bf8831d539891c7d
Added to database: 08/17/2026, 20:42:01 UTC
Last enriched: 09/25/2026, 02:40:53 UTC
Last updated: 10/02/2026, 02:46:06 UTC
Views: 46
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.