# mem0ai (PyPI) vulnerabilities

6 known vulnerabilities (1 critical, 1 high, 4 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: 2.2.1 (Sep 25, 2026): no advisory affects it
- Newest unaffected release: 2.2.1 (Sep 25, 2026), the latest release
- Weekly downloads: 637.6K
- Dependents: 116
- Releases: 192 since 0.0.1 (May 18, 2024)
- Registry: https://pypi.org/project/mem0ai/
- Releases read: Nov 8, 2026

## Version timeline

Affected versions per advisory, in version order:

- CVE-2026-116575: 0.0.1 to 2.0.17 (2.0.18 is outside it)
- CVE-2026-115324: 0.1.117 to 1.0.7 (1.0.8 is outside it)
- CVE-2026-31245: 0.0.1 to 1.0.0 (1.0.1 is outside it)
- CVE-2026-31241: 0.0.1 to 1.0.0 (1.0.1 is outside it)
- CVE-2026-31240: 0.0.1 to 1.0.0 (1.0.1 is outside it)
- CVE-2026-7597: 0.0.1 to 2.0.0b1 (2.0.0b2 is outside it)

## Advisories (6)

### [CVE-2026-116575](https://cve.now/CVE-2026-116575): Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (\_build\_session\_scope)

- Severity: Medium 6.3
- Published: Oct 26, 2026
- Affected: fixed in 2.0.18.
- Fixed in 2.0.18 (released Aug 11, 2026, 76 days before disclosure).
- The latest release, 2.2.1, is not affected.

### [CVE-2026-115324](https://cve.now/CVE-2026-115324): mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

- Severity: Critical 9.2
- Published: Oct 22, 2026
- Affected: from 0.1.117, fixed in 1.0.8.
- Fixed in 1.0.8 (released Mar 26, 2026, 210 days before disclosure).
- The latest release, 2.2.1, is not affected.

### [CVE-2026-31245](https://cve.now/CVE-2026-31245): The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories).

- Severity: Medium 5.3
- Published: May 12, 2026
- Affected: through 1.0.0.
- Fixed in 1.0.1 (released Nov 13, 2025, 180 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 2.2.1, is not affected.

### [CVE-2026-31241](https://cve.now/CVE-2026-31241): The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories).

- Severity: Medium 6.5
- Published: May 12, 2026
- Affected: through 1.0.0.
- Fixed in 1.0.1 (released Nov 13, 2025, 180 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 2.2.1, is not affected.

### [CVE-2026-31240](https://cve.now/CVE-2026-31240): The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints.

- Severity: High 7.5
- Published: May 12, 2026
- Affected: through 1.0.0.
- Fixed in 1.0.1 (released Nov 13, 2025, 180 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 2.2.1, is not affected.

### [CVE-2026-7597](https://cve.now/CVE-2026-7597): mem0ai mem0 faiss.py pickle.dump deserialization

- Severity: Medium 5.3
- Published: May 1, 2026
- Affected: fixed in 2.0.0b2.
- Fixed in 2.0.0b2 (released Apr 16, 2026, 15 days before disclosure).
- The latest release, 2.2.1, is not affected.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/mem0ai
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.