What’s Vulnerable › Products

doobidoo mcp-memory-service vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your doobidoo mcp-memory-service version is affected

Latest doobidoo mcp-memory-service vulnerabilities

• CVE-2026-50027 — mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete (CVSS 9.8)
• CVE-2026-49291 — mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call (CVSS 8.1)
• CVE-2026-33010 — mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft (CVSS 8.8)
• CVE-2026-29787 — mcp-memory-service: System Information Disclosure via Health Endpoint (CVSS 5.3)