PatchSiren

mem0ai CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL mem0ai CVE published 2026-10-22

CVE-2026-115324

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-22T12:31:17.000Z and has not been modified since then. The vulnerability exists in mem0ai versions 0.1.117 through 1.0.7 due to an SQL injection issue in the mem0/vector_stores/databricks.py file. Attackers can inject SQL by influencing stored memory content, metadata, or message names that reach un [truncated]