CVE-2026-49291

HIGH8.1

mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call

Published Jun 19, 2026

Modified Yesterday

Details

mcp-memory-service is a semantic memory layer for AI applications. Prior to version 10.65.3, the HTTP MCP JSON-RPC endpoint at /mcp requires only OAuth read scope for all requests, then dispatches tools/call directly to handlers that include mutating tools. A read-only OAuth client can call store_memory and delete_memory through MCP even though the corresponding REST endpoints require write scope. Version 10.65.3 patches the issue.

References

WEB

https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-2r68-g678-7qr3

WEB

https://pypi.org/project/mcp-memory-service/10.65.3

WEB

https://web.archive.org/web/20260508112116/https://github.com/doobidoo/mcp-memory-service/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-49291

CVSS Analysis

CVSS v3.1

8.1