CVE-2026-49291
2 advisories.
PyPI/mcp-memory-service CVE-2026-49291: high 8.1
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Action: Upgrade mcp-memory-service to 10.65.3 or later.
pip install mcp-memory-service==10.65.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.65.3 | - |
Fixed versions
| 10.65.3 |
Sources
- osv: GHSA-2r68-g678-7qr3
- https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-2r68-g678-7qr3
- https://nvd.nist.gov/vuln/detail/CVE-2026-49291
- https://github.com/doobidoo/mcp-memory-service
- https://pypi.org/project/mcp-memory-service/10.65.3
- https://web.archive.org/web/20260508112116/https://github.com/doobidoo/mcp-memory-service
CVE-2026-49291 · published · modified · JSON
PyPI/mcp-memory-service CVE-2026-49291: high 8.1
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Action: Upgrade mcp-memory-service to 10.65.3 or later.
pip install mcp-memory-service==10.65.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.65.3 | - |
Fixed versions
| 10.65.3 |
Sources
- osv: PYSEC-2026-2622
- https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-2r68-g678-7qr3
- https://nvd.nist.gov/vuln/detail/CVE-2026-49291
- https://github.com/doobidoo/mcp-memory-service
- https://pypi.org/project/mcp-memory-service/10.65.3
- https://web.archive.org/web/20260508112116/https://github.com/doobidoo/mcp-memory-service
- https://pypi.org/project/mcp-memory-service
- https://github.com/advisories/GHSA-2r68-g678-7qr3
CVE-2026-49291 · published · modified · JSON