Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-75110

MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET

CVSS 4.0 9.3 CRITICALCVSS 3.1 9.8 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-75110

Published

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header also yields None, so the comparison None == None evaluates true. The request is then treated as a trusted internal principal and granted scopes: ["all"]. As a result, an unauthenticated remote attacker can reach the admin API-key management endpoints to mint API keys for any user, enumerate keys, revoke keys, and generate a master key for persistent privileged access, as well as all data endpoints.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-75110

Published

MemOS

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "MemTensor",
                    "product": "MemOS",
                    "defaultStatus": "unaffected",
                    "packageURL": "pkg:pypi/MemoryOS",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "lessThanOrEqual": "2.0.30",
                            "versionType": "custom"
                        }
                    ],
                    "repo": "https://github.com/MemTensor/MemOS"
                }

Original source record · Cite this exact observation · Complete original publisher JSON