Description
Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configuration but only verifies authentication via JWT or X-API-Key without validating the caller's role. Any authenticated user holding a distributed API key can redirect all LLM and embedder traffic to an attacker-controlled server, with the malicious configuration persisted to PostgreSQL and surviving server restarts to affect all users and API keys on the instance.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
mem0ai mem0
Default version status: affected
0 to ≤ 0.2.8affectedae7f4062652df1376990221101d1adbb0819c973unaffected
pkg:github/mem0ai/mem0References
- https://github.com/mem0ai/mem0/issues/5127 ↗
- https://github.com/mem0ai/mem0/issues/5384 ↗
- https://github.com/mem0ai/mem0/pull/5360 ↗
- https://github.com/mem0ai/mem0/commit/ae7f4062652df1376990221101d1adbb0819c973 ↗
- https://www.vulncheck.com/advisories/mem0-missing-authorization-via-post-configure-endpoint ↗