CVE-2025-65797 memos vulnerability allows arbitrarily modification or deletion registered identity providers

What is CVE-2025-65797?

CVE-2025-65797 is a medium-severity missing authorization vulnerability in Usememos Memos, published on 8 Dec 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete registered identity providers, leading to an account takeover or Denial of Service (DoS).

Weakness: CWE-284

Which versions are affected by CVE-2025-65797?

3 open source packages ship an affected version, including github.com/usememos/memos. It affects 1 product.

Products include Usememos Memos.

How do I fix CVE-2025-65797?

Upgrade github.com/usememos/memos to 0.25.3 or later.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2025-65797 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-65797 exists.

Other vulnerabilities in Usememos Memos

• CVE-2025-50738 Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs Critical 9.8
• CVE-2025-22952 Memos Server-Side Request Forgery (SSRF) Critical 9.8
• CVE-2023-0109 Stored XSS in usememos/memos Critical 9.8
• CVE-2023-4696 Improper Access Control in usememos/memos Critical 9.8
• CVE-2022-4866 Cross-site Scripting (XSS) - Stored in usememos/memos Critical 9.8

All Usememos Memos vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-99m2-qwx6-2w6f, GO-2025-4220.