{"data":{"id":"6d384273-190d-4a46-8dfe-107e8a0d460b","title":"CVE-2026-116575: Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and…","summary":"Mem0's Python SDK before 2.0.18 and TypeScript SDK before 3.1.6 build session scope keys by joining caller-controlled user_id, agent_id, and run_id values with unescaped & and = delimiters in _build_session_scope() and Memory.buildSessionScope(). A caller can embed another scope component in an identifier so that distinct tenant tuples yield the same session_scope key, which Memory.add(), AsyncMemory.add(), and POST /memories use to read and save recent raw messages. This enables cross-tenant conversation disclosure and eviction or interleaving of another tenant's history.","solution":"Fixed in Python SDK 2.0.18 and TypeScript SDK 3.1.6.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-116575","publishedAt":"2026-10-26T21:18:13.360Z","cveId":"CVE-2026-116575","cweIds":["CWE-200","CWE-863"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["pii_leakage","data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Mem0"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mem0 SDK session scope collision in add() exposes cross-tenant conversations","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"local","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-27T06:10:23.203Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-27T06:10:27.287Z","patchAvailable":null,"disclosureDate":"2026-10-26T21:18:13.360Z","capecIds":["CAPEC-116","CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}