CVE-2026-59706
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
The vulnerability in mem0 exposes unauthenticated config API endpoints that disclose LLM API keys in plaintext and allow server-side request forgery (SSRF) via the attacker-controlled ollama_base_url parameter. Unauthenticated attackers can retrieve stored secrets like OpenAI API keys via GET /api/v1/config/ or trigger SSRF attacks by setting ollama_base_url to internal addresses such as cloud IMDS via PUT /api/v1/config/mem0/llm endpoint.
Risk Assessment
The risk includes leakage of sensitive LLM API keys and the ability to perform SSRF attacks on internal cloud resources, potentially leading to unauthorized data access and further infrastructure compromise.
Recommendation
Immediately implement authentication for all config API endpoints, remove or secure the GET /api/v1/config/ and PUT /api/v1/config/mem0/llm endpoints, and restrict the ollama_base_url parameter to trusted values.
Original NVD description (English source)
mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forgery via attacker-controlled ollama_base_url parameter. Unauthenticated attackers can retrieve stored secrets like OpenAI API keys via GET /api/v1/config/ or trigger SSRF attacks by setting ollama_base_url to internal addresses like cloud IMDS via PUT /api/v1/config/mem0/llm endpoint.