Threat database

mem0 versions from 0.1.117 up to but not including 1.0.8 contain an SQL injection vulnerability in the file mem0/vector_stores/databricks.py. This vulnerability allows attackers to inject SQL commands by manipulating stored memory content such as memory text, metadata, or message names. The injection occurs due to unescaped string interpolation in insert() and update() operations targeting a Databricks SQL warehouse. The vulnerability has a critical severity with a CVSS 4.0 score of 9.2.

Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configuration but only verifies authentication via JWT or X-API-Key without validating the caller's role. Any authenticated user holding a distributed API key can redirect all LLM and embedder traffic to an attacker-controlled server, with the malicious configuration persisted to PostgreSQL and surviving server restarts to affect all users and API keys on the instance.

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vector_stores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 62dca096f9236010ca15fea9ba369ba740b86b7a. Applying a patch is the recommended action to fix this issue.