Advisoriesby Ibismem0GHSA-7587-9684-52r6
mem0ai Databricks vector store vulnerable to SQL injection
Fix: upgrade to 1.0.8 or later
mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string interpolation to execute injected SQL on the configured Databricks SQL warehouse.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| mem0ai PyPI | >= 0.1.117, < 1.0.8 | 1.0.8 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-89
- Also known as
- CVE-2026-115324
- nvd.nist.gov/vuln/detail/CVE-2026-115324
- github.com/mem0ai/mem0/issues/4073
- github.com/mem0ai/mem0/pull/4558
- github.com/mem0ai/mem0/commit/a2ffca32660537b7b304305f36774ae2a13452cb
- github.com/mem0ai/mem0
- github.com/mem0ai/mem0/blob/v1.0.7/mem0/vector_stores/databricks.py
- github.com/mem0ai/mem0/releases/tag/v1.0.8
- www.vulncheck.com/advisories/mem0-0.1.117-before-1.0.8-sql-injection-via-databricks-vector-store
More mem0 advisories
All mem0
mem0 server lacks authentication and authorization controls for its memory creation API endpointCVE-2026-31245no fix yetmem0 server lacks authentication and authorization controls for its memory deletion API endpointCVE-2026-31241no fix yetmem0 server lacks authentication and authorization controls for its memory management API endpointsCVE-2026-31240no fix yetmem0ai mem0 has an Improper Input Validation IssueCVE-2026-7597fixed in 2.0.0b2