Mem0 (0.1.117 Before 1.0.8) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/mem0-0.1.117-before-1.0.8/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 22 Oct 2026 14:16:49 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgmem0: SQL injection in Databricks vector store (CVE-2026-115324)https://feed.craftedsignal.io/briefs/2026-10-mem0-sql-injection/Thu, 22 Oct 2026 14:16:49 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-mem0-sql-injection/mem0 versions 0.1.117 before 1.0.8 contain an SQL injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to execute injected SQL on the configured Databricks SQL warehouse by influencing stored memory content.CVE-2026-115324 is a SQL injection vulnerability in the mem0 library (versions 0.1.117 before 1.0.8). The flaw exists in mem0/vector_stores/databricks.py due to unescaped string interpolation in insert() and update() operations. Attackers can supply crafted memory text, metadata, or message names to execute injected SQL on the configured Databricks SQL warehouse.

]]>highadvisory