CyberRota Analysis
AI-GeneratedThe mcp-memory-service is vulnerable due to a lack of authentication on all HTTP routes under /api/documents/* prior to version 10.67.1, allowing unauthenticated remote attackers to upload, read, and delete documents in the memory store. This critical flaw can lead to unauthorized access and manipulation of sensitive data, posing significant risks to AI applications relying on this service. Organizations using affected versions should prioritize upgrading to 10.67.1 to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
mcp-memory-service is a semantic memory layer for AI applications. Prior to 10.67.1, all HTTP routes under /api/documents/* in mcp-memory-service are served without any authentication dependency, even when the server is configured with an API key (MCP_API_KEY) or OAuth. An unauthenticated remote attacker can upload arbitrary content into the memory store (write), retrieve stored document content (read), and permanently delete memories belonging to authenticated users (delete) — all without supplying any credentials. The /api/memories counterpart correctly enforces authentication, making this an inconsistent and exploitable authentication boundary. This vulnerability is fixed in 10.67.1.