Threats affecting pkg:pypi/mem0

CVE-2026-116575 is a vulnerability in mem0, a persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, the session scope key generation improperly concatenates user-controlled identifiers without escaping delimiters, allowing cross-tenant session key collisions. This flaw enables unauthorized access to other tenants' conversation histories, leading to exposure and potential interleaving of sensitive information. The issue is fixed in Python SDK 2.0.18 and TypeScript SDK 3.1.6.

mem0 versions from 0.1.117 up to but not including 1.0.8 contain an SQL injection vulnerability in the file mem0/vector_stores/databricks.py. This vulnerability allows attackers to inject SQL commands by manipulating stored memory content such as memory text, metadata, or message names. The injection occurs due to unescaped string interpolation in insert() and update() operations targeting a Databricks SQL warehouse. The vulnerability has a critical severity with a CVSS 4.0 score of 9.2.