GHSA-7587-9684-52r6

mem0ai Databricks vector store vulnerable to SQL injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-115324

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	mem0ai	>= 0.1.117, < 1.0.8	1.0.8

Details

As written in the advisory (Markdown source, shown as plain text).

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string interpolation to execute injected SQL on the configured Databricks SQL warehouse.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2026-115324 advisory
https://github.com/mem0ai/mem0/issues/4073 web
https://github.com/mem0ai/mem0/pull/4558 web
https://github.com/mem0ai/mem0/commit/a2ffca32660537b7b304305f36774ae2a13452cb web
https://github.com/mem0ai/mem0 package
https://github.com/mem0ai/mem0/blob/v1.0.7/mem0/vector_stores/databricks.py web
https://github.com/mem0ai/mem0/releases/tag/v1.0.8 web
https://www.vulncheck.com/advisories/mem0-0.1.117-before-1.0.8-sql-injection-via-databricks-vector-store web