CVE-2026-116575

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join caller-controlled user_id, agent_id, and run_id values using unescaped & and = delimiters. A caller can embed another scope component in a controlled identifier so that distinct tenant tuples produce the same session_scope key. Memory.add(), AsyncMemory.add(), and the REST POST /memories flow use that key to read and save recent raw messages, allowing cross-tenant conversation disclosure and eviction or interleaving of another tenant's history. This issue is fixed in Python SDK 2.0.18 and TypeScript SDK 3.1.6.

• CWE-200
• CWE-863

• https://github.com/mem0ai/mem0/commit/71f2ebefa3494da21550fb525216818776cde67f
• https://github.com/mem0ai/mem0/pull/6892
• https://github.com/mem0ai/mem0/releases/tag/ts-v3.1.6
• https://github.com/mem0ai/mem0/releases/tag/v2.0.18
• https://github.com/mem0ai/mem0/security/advisories/GHSA-5324-3w58-qpp2

Published

Oct 26, 2026

Last Modified

Oct 27, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-116554A flaw has been found in Argilla up to 2.8.0. The affected e…3.5
• CVE-2026-116555A vulnerability has been found in Argilla up to 2.8.0. The i…2.4
• CVE-2026-116556A vulnerability was found in Argilla up to 2.8.0. This affec…2.4
• CVE-2026-11656Use after free in ServiceWorker in Google Chrome prior to 14…8.3
• CVE-2026-116566socket.getaddrinfo() previously accepted null bytes within *…5.3
• CVE-2026-11657Use after free in Payments in Google Chrome on Mac prior to …8.8
• CVE-2026-116576systeminformation is a System and OS information library for…7.8
• CVE-2026-116577Tornado is a Python web framework and asynchronous networkin…5.3
• CVE-2026-116578Tornado is a Python web framework and asynchronous networkin…2.1
• CVE-2026-116579Autobahn Python is a WebSocket and WAMP implementation for P…5.9
• CVE-2026-11658Insufficient validation of untrusted input in Extensions in …6.5
• CVE-2026-116580Seroval facilitates JavaScript value stringification, includ…7.3