CVE-2026-75110 MemTensor CVE debrief

Who should care

MemOS administrators, security teams, and teams responsible for LLMs and AI agents should assess exposure and prioritize remediation due to the critical severity and potential for unauthenticated admin access.

Why it matters

CVE-2026-75110 is a critical authentication bypass vulnerability in MemOS that allows unauthenticated remote attackers to access admin API key management endpoints when the INTERNAL_SERVICE_SECRET environment variable is unset. MemOS administrators and security teams should prioritize verifying authentication configurations, checking for exposure, and restricting access to affected endpoints until INTERNAL_SERVICE_SECRET is set.

• Unauthenticated access to admin API key management endpoints.
• Potential for API key minting, enumeration, revocation, and master key generation.
• Bypass of authentication mechanisms when INTERNAL_SERVICE_SECRET is unset.
• Possible persistent privileged access via master key generation.

Technical summary

The MemOS memory operating system for LLMs and AI agents has a critical vulnerability (CVE-2026-75110) when authentication is enabled but the INTERNAL_SERVICE_SECRET environment variable is unset. This allows an unauthenticated remote attacker to access admin API key management endpoints, mint API keys, enumerate keys, revoke keys, and generate a master key for persistent privileged access. The vulnerability is caused by the is_internal_request() check in src/memos/api/middleware/auth.py failing open when INTERNAL_SERVICE_SECRET is unset, treating the request as a trusted internal principal and granting scopes: [all].

Defensive priority

MemOS administrators and security teams should prioritize verifying authentication configurations and checking for exposure to unauthenticated admin API key management endpoints.

Recommended defensive actions

• Verify MemOS deployments for authentication configurations and INTERNAL_SERVICE_SECRET settings.
• Check for exposure to unauthenticated admin API key management endpoints.
• Restrict access to admin API key management endpoints until INTERNAL_SERVICE_SECRET is set.
• Monitor for unauthorized API key creation, enumeration, revocation, and master key generation.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and NVD entry provide details on the authentication bypass vulnerability in MemOS when the INTERNAL_SERVICE_SECRET environment variable is unset. Official source references include GitHub repositories and a Vulncheck advisory.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.