Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2026-59706

mem0 - Unauthenticated Config API Exposure and SSRF via ollama_base_url

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forgery via attacker-controlled ollama_base_url parameter. Unauthenticated attackers can retrieve stored secrets like OpenAI API keys via GET /api/v1/config/ or trigger SSRF attacks by setting ollama_base_url to internal addresses like cloud IMDS via PUT /api/v1/config/mem0/llm endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mem0 mem0

Default version status: unaffected

  • 0 to ≤ a3154d5affected
pkg:pypi/mem0ai

References