Vulnerability details

CVE-2026-49291

doobidoo mcp-memory-service

mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call

CVSS 3.1

8.1High

Official description

mcp-memory-service is a semantic memory layer for AI applications. Prior to version 10.65.3, the HTTP MCP JSON-RPC endpoint at `/mcp` requires only OAuth `read` scope for all requests, then dispatches `tools/call` directly to handlers that include mutating tools. A read-only OAuth client can call `store_memory` and `delete_memory` through MCP even though the corresponding REST endpoints require `write` scope. Version 10.65.3 patches the issue.

CVSS scores

Score	Version	Source	Vector
8.1High	3.1	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
doobidoo	mcp-memory-service	< 10.65.3	CVEProject cvelistV5 (CNA)

References and advisories

https://web.archive.org/web/20260508112116/https://github.com/doobidoo/mcp-memory-service/ x_refsource_CONFIRM
https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-2r68-g678-7qr3 x_refsource_MISC
https://pypi.org/project/mcp-memory-service/10.65.3 x_refsource_MISC

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-06-19
Last updated: 2026-06-22
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

0.48%

Probability of exploitation in 30 days

42.2%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-862
Missing Authorization