Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-115324: mem0 lets attacker execute SQL on Databricks

CVE-2026-115324 · published 13 days ago

Summary

Versions of mem0 prior to 1.0.8 let a user who can add or change stored memory content cause the software to run unintended database commands on a linked Databricks SQL warehouse. This could let an attacker view, change, or delete data in that warehouse. Upgrade mem0 to version 1.0.8 or later, or apply the vendor's patch, and limit who can supply memory content.

What to do

Update mem0ai to version 1.0.8.
Update mem0ai mem0 to version 1.0.8 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	mem0ai	mem0	< 1.0.8
pip	–	mem0ai	>= 0.1.117, < 1.0.8 Fix: upgrade to 1.0.8

Original advisory text

mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string interpolation to execute injected SQL on the configured Databricks SQL warehouse.

References

https://github.com/mem0ai/mem0/releases/tag/v1.0.8 Vendor Advisory
https://github.com/mem0ai/mem0/issues/4073 Third Party Advisory
https://github.com/mem0ai/mem0/pull/4558 Patch
https://github.com/mem0ai/mem0/commit/a2ffca32660537b7b304305f36774ae2a13452cb Patch
https://github.com/mem0ai/mem0 Product
https://github.com/mem0ai/mem0/blob/v1.0.7/mem0/vector_stores/databricks.py Third Party Advisory
https://www.vulncheck.com/advisories/mem0-0.1.117-before-1.0.8-sql-injection-via... Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/115xxx/CVE-2026-1153... Vendor Advisory
https://github.com/advisories/GHSA-7587-9684-52r6
https://nvd.nist.gov/vuln/detail/CVE-2026-115324 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

9.4 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-89SQL Injection

Timeline

Published22 Oct 2026

Updated4 Nov 2026

First seen22 Oct 2026

Sources

CVE-2026-115324 · NVD

CVE-2026-115324 · MITRE

CVE-2026-115324 · OSV

GHSA-7587-9684-52r6 · GHSA

GHSA-7587-9684-52r6 · OSV

Track software like this

Free during beta