LowVulnerability
CVE-2026-11330: thedotmack claude-mem weak hash in observation content hashing
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-11330
- Published
- Record updated
- Affected
- claude-mem < 12.0.0
- Fixed in
- 12.0.0
- released April 7, 2026, 59 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- <0.1%
Summary
CVE-2026-11330 affects thedotmack claude-mem up to 11.0.1. The function computeObservationContentHash in src/services/sqlite/observations/store.ts, part of the Observation Content Hash Handler component, uses a weak hash. Exploitation requires local access, has high complexity, and is described as difficult.
Mitigation
Upgrade to version 12.0.0. Patch name: f32fda8b35e9fe9329f87da65c31149362a03f97.
Related items
- MediumCVE-2026-122160: myshell-ai AIlice HuggingFace Model Wrapper untrusted model loadingSimilar attack · NVD/CVE Database
- MediumCVE-2026-122159: Edge0-AI Audio8_TTS path traversal via slow_decode_models argumentSimilar attack · NVD/CVE Database
- MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
- HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
- HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database