Vulnerability · Published Aug 17, 2026 · Assigned by VulnCheck

CVE-2026-75110MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET

Critical 9.8

In plain English

A critical-severity security flaw in MemOS from MemTensor. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.7%top 48.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header also yields None, so the comparison None == None evaluates true. The request is then treated as a trusted internal principal and granted scopes: ["all"]. As a result, an unauthenticated remote attacker can reach the admin API-key management endpoints to mint API keys for any user, enumerate keys, revoke keys, and generate a master key for persistent privileged access, as well as all data endpoints.

Affected products (as reported)

Vendor	Product	Versions
MemTensor	MemOS	0 – through 2.0.30

Weakness: CWE-697 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

GitHub Issue #2259 issue-tracking
https://github.com/MemTensor/MemOS product
is_internal_request in src/memos/api/middleware/auth.py technical-description
VulnCheck Advisory: MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET third-party-advisory