CVE-2026-85093

MediumCVSS 6.5

Published: 03/09/2026(UTC)Updated: 10/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Summary

Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.

Risk Assessment

The risk includes breach of confidentiality of personal data and conversation content, potentially leading to leakage of sensitive information and violation of data protection regulations.

Recommendation

Upgrade Cheshire Cat AI to a patched version that fixes per-user filtering, and restrict MEMORY:READ permissions.

Other vulnerabilities in Cheshire Cat AI

CVE-2026-90579High
A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function _authorize_http_key of the file core/cat/factory/custom_auth_handler.py. The manipulation of the argument user_id leads to missing authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS