CriticalVulnerability

GHSA-84hp-mqvj-3p8h: mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

Source: Hugging Face Security Advisories(opens in a new tab)
Identifiers: CVE-2026-50027GHSA-84hp-mqvj-3p8h
Published: July 2, 2026
Record updated: October 9, 2026

Affected: mcp-memory-service < 10.67.1
Fixed in: 10.67.1
Known exploitation: Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS: 1.0%

Summary

All HTTP routes under /api/documents/* in mcp-memory-service are served without any authentication dependency, even when MCP_API_KEY or OAuth is configured. An unauthenticated remote attacker can upload content into the memory store, retrieve stored document content, and permanently delete memories belonging to authenticated users. The /api/memories routes enforce authentication, which makes the boundary inconsistent. The source rates it CVSS 9.8 Critical.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Details

Scores and exploitation

Patch available: Yes
EPSS: 1.0%Estimated probability that this CVE is exploited in the next 30 days, from the FIRST Exploit Prediction Scoring System. Read on October 13, 2026.
Disclosure date: July 2, 2026

Affected

Packages: mcp-memory-service@< 10.67.1 (fixed: 10.67.1)

Classification

Attack type: Other
Attack sophistication: Trivial
AI component targeted: API
Impact: Confidentiality,
Integrity,
Availability
Labels: security

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://github.com/advisories/GHSA-84hp-mqvj-3p8h

First tracked: July 2, 2026 at 02:00 PM ET, from Hugging Face Security Advisories

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 85% (self-assessed)

Summary

Mitigation

Related items