A flaw in VoltAgent’s Memory REST API allows a malicious requester to manipulate the conversationId argument, bypassing authorization controls and gaining unauthorized access to conversation data. The weakness aligns with CWE‑266 and CWE‑285, representing improper privilege management and improper authorization. The reported CVSS score of 2.3 indicates a low‑severity risk since the vulnerability does not lead to code execution or data exfiltration beyond the conversation boundaries but still permits privileged data disclosure to unauthenticated or low‑privilege users.

All installations of VoltAgent up to and including version 2.1.17 are affected. The issue resides in the handleGetMemoryConversation function within the packages/server-core/src/handlers/memory.handlers.ts file and impacts the Memory REST API interface accessed through the VoltAgent application.

The attack vector is remote via the public REST API and requires manipulation of a query parameter; it is described as having high complexity with known difficulty of exploitation. An exploit has been publicly disclosed and may be utilized, and the vulnerability is not listed in CISA’s KEV catalog. The EPSS score is not available, suggesting low but uncertain exploitation probability. While the CVSS score is low, the potential impact on confidentiality for exposed conversation data warrants attention, especially if the endpoint is openly reachable.