mem0 0.1.117 through 1.0.7 contains a SQL injection flaw in the Databricks vector store module. The flaw originates from unescaped string interpolation in insert() and update() calls that allow an attacker to inject arbitrary SQL by supplying crafted memory text, metadata, or message names. This can lead to unauthorized data exfiltration or modification, compromising the confidentiality and integrity of data stored in the Databricks SQL warehouse.

The vulnerability affects the mem0 package from mem0ai, version 0.1.117 up to but not including 1.0.8. Any deployment running a mem0 version in this range that utilizes the Databricks vector store is susceptible unless mitigated by an upgrade.

The CVSS score for the vulnerability is 9.2, indicating critical severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves an attacker who can provide or influence memory content, metadata, or message names to the mem0 vector store API; the attacker may then trigger the injection against the configured Databricks SQL warehouse. The exploitation requires that the mem0 instance and the Databricks SQL warehouse are reachable and that the injected SQL can be executed with sufficient privileges, so the attack surface is limited to environments where mem0 is deployed with direct access to Databricks.