CVE-2026-115324
1 advisory.
PyPI/mem0ai CVE-2026-115324: high 8.1
mem0ai Databricks vector store vulnerable to SQL injection
Action: Upgrade mem0ai to 1.0.8 or later.
pip install mem0ai==1.0.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.117 | 1.0.8 | - |
Fixed versions
| 1.0.8 |
Sources
- osv: GHSA-7587-9684-52r6
- https://nvd.nist.gov/vuln/detail/CVE-2026-115324
- https://github.com/mem0ai/mem0/issues/4073
- https://github.com/mem0ai/mem0/pull/4558
- https://github.com/mem0ai/mem0/commit/a2ffca32660537b7b304305f36774ae2a13452cb
- https://github.com/mem0ai/mem0
- https://github.com/mem0ai/mem0/blob/v1.0.7/mem0/vector_stores/databricks.py
- https://github.com/mem0ai/mem0/releases/tag/v1.0.8
- https://www.vulncheck.com/advisories/mem0-0.1.117-before-1.0.8-sql-injection-via-databricks-vector-store
CVE-2026-115324 · published · modified · JSON