Vulnerability · Published Aug 14, 2026 · Assigned by GitHub_M
CVE-2026-50027mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
Critical 9.8
In plain English
A critical-severity missing authentication in mcp-memory-service from doobidoo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
mcp-memory-service is a semantic memory layer for AI applications. Prior to 10.67.1, all HTTP routes under /api/documents/* in mcp-memory-service are served without any authentication dependency, even when the server is configured with an API key (MCP_API_KEY) or OAuth. An unauthenticated remote attacker can upload arbitrary content into the memory store (write), retrieve stored document content (read), and permanently delete memories belonging to authenticated users (delete) — all without supplying any credentials. The /api/memories counterpart correctly enforces authentication, making this an inconsistent and exploitable authentication boundary. This vulnerability is fixed in 10.67.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | mcp-memory-service | 10.67.1 | GHSA-84hp-mqvj-3p8h |
| PyPI | mcp-memory-service | 10.67.1 | PYSEC-2026-2624 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| doobidoo | mcp-memory-service | < 10.67.1 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://web.archive.org/web/20260508112116/https://github.com/doobidoo/mcp-memory-service x_refsource_CONFIRM
- https://github.com/advisories/GHSA-84hp-mqvj-3p8h x_refsource_MISC
- https://pypi.org/project/mcp-memory-service x_refsource_MISC