All HTTP routes under /api/documents/* in mcp-memory-service are missing authentication enforcement, allowing unauthenticated attackers to perform read, write, and delete operations on memory data. The documents.py router is instantiated without authentication dependencies, unlike the correctly protected /api/memories routes. This inconsistency creates an exploitable authentication boundary bypass. The vulnerability was confirmed by a proof-of-concept showing unauthenticated upload, retrieval, and deletion of memory data, including data belonging to authenticated users. The issue affects versions prior to 10.67.1. No patch link is provided in the data, and the service is not cloud-hosted, so remediation requires vendor or user action.

An unauthenticated remote attacker can fully bypass authentication on the Document API endpoints, allowing arbitrary memory data to be read, written, or deleted. This compromises confidentiality, integrity, and availability of memory data stored by the service. Legitimate users' data can be deleted without authorization, causing data loss and potential service disruption. The vulnerability has a CVSS 3.1 score of 9.8, indicating critical severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The documented remediation is to add authentication dependencies such as Depends(require_write_access) or Depends(require_read_access) to all routes in the documents.py router to enforce proper access control. Until a patch is available, users should restrict network access to the affected endpoints or disable the Document API if possible.