CVE-2026-85093: Cheshire Cat AI Memory Collection Endpoint Information Disclosure
Published Sep 3, 2026
·Updated
Cheshire Cat AI's GET /memory/collections/{collectionid}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.
Affected Software
1 affected component
Cheshire Cat AI
Event History
Sep 3, 2026
CVE Published
via MITRE·01:04 AM
Data Sourced
via MITRE·01:04 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An authenticated user with the MEMORY:READ permission can exploit it. No user interaction is required.
2
What data could be exposed?
An attacker can retrieve episodic memory points belonging to all users in a collection, including stored conversation messages and personal data.
3
How is the data accessed?
The affected GET endpoint can be paginated using its offset cursor, allowing an authorized attacker to enumerate memory points beyond their own user-scoped data.