mem0 contains configuration API endpoints that are accessible without authentication. An attacker can retrieve stored secrets such as OpenAI API keys in plaintext by performing a GET request to /api/v1/config/. In addition, the API allows an unauthenticated PUT to /api/v1/config/mem0/llm where the ollama_base_url parameter can be set to any URL. By providing an attacker‑controlled URL that points to internal services—such as the cloud instance metadata service—an attacker can trigger a server‑side request forgery (SSRF) that enables further compromise of internal resources or data. The combination of plaintext credential disclosure and SSRF makes this a high‑risk vulnerability that can lead to additional privilege escalation or data theft.

The affected product is mem0, released by the vendor mem0. No specific version information is available in the advisory and therefore all releases of mem0 remain potentially impacted.

The CVSS score of 9.2 places the vulnerability in the critical range. The EPSS score of < 1% indicates a low but non‑zero probability of exploitation. The issue is not listed in the CISA KEV catalog, meaning there are no known publicly disclosed exploits at this time. However, because the endpoints are unauthenticated and the attacker can influence outbound requests, the risk of exploitation remains high in environments where mem0’s configuration endpoints are reachable from an attacker’s network.