CVE-2026-115324: mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store
mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vectorstores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string interpolation to execute injected SQL on the configured Databricks SQL warehouse.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
mem0to a version that resolves this vulnerability.Fixed in 1.0.8
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using mem0's Databricks vector store are exposed when they use a configured Databricks SQL warehouse. The vulnerable code is in mem0/vector_stores/databricks.py.
What input must an attacker control to exploit this?
An attacker must be able to influence stored memory content that reaches the Databricks vector store. Crafted memory text, metadata, or message names can reach unescaped string interpolation in insert() or update() operations.
What version should be used to remediate the issue?
The affected range is mem0 0.1.117 through versions before 1.0.8. Upgrade to 1.0.8 or later.