CVE-2026-49948 - Mem0 0.2.8 Missing Authorization via POST /configure Endpoint
CVE ID :CVE-2026-49948 Published : June 9, 2026, 4:16 p.m. | 59 minutes ago Description :Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and...