Advisoriesby Ibismem0GHSA-xqxw-r767-67m7
mem0ai mem0 has an Improper Input Validation Issue
Fix: upgrade to 2.0.0b2 or later
A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vector_stores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 62dca096f9236010ca15fea9ba369ba740b86b7a. Applying a patch is the recommended action to fix this issue.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| mem0ai PyPI | < 2.0.0b2 | 2.0.0b2 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-20
- Also known as
- CVE-2026-7597, PYSEC-2026-2636
More mem0 advisories
All mem0
mem0: information disclosureCVE-2026-116575fixed in 2.0.18mem0ai Databricks vector store vulnerable to SQL injectionCVE-2026-115324fixed in 1.0.8mem0 server lacks authentication and authorization controls for its memory management API endpointsCVE-2026-31240no fix yetmem0 server lacks authentication and authorization controls for its memory deletion API endpointCVE-2026-31241no fix yetmem0 server lacks authentication and authorization controls for its memory creation API endpointCVE-2026-31245no fix yet