CVE-2026-33010 mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft
Misconfigured CORS allows malicious websites to read, modify, and delete stored memories in mcp-memory-service when HTTP and anonymous access are enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-33010?
CVE-2026-33010 is a high-severity vulnerability in doobidoo mcp-memory-service, published on 20 Mar 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.25.1, when the HTTP server is enabled (MCP_HTTP_ENABLED=true), the application configures FastAPI's CORSMiddleware with allow_origins=['*'], allow_credentials=True, allow_methods=["*"], and allow_headers=["*"]. The wildcard Access-Control-Allow-Origin: * header permits any website to read API responses cross-origin. When combined with anonymous access (MCP_ALLOW_ANONYMOUS_ACCESS=true) - the simplest way to get the HTTP dashboard working without OAuth - no credentials are needed, so any malicious website can silently read, modify, and delete all stored memories. This issue has been patched in version 10.25.1.
Weakness: CWE-942
Which versions are affected by CVE-2026-33010?
3 open source packages ship an affected version, including mcp-memory-service. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
mcp-memory-service PyPI | All versions | 10.25.1 |
mcp-memory-service PyPI | All versions | 10.25.1 |
mcp-memory-service PyPI | All versions | 10.25.1 |
Products include Doobidoo Mcp-Memory-Service.
How do I fix CVE-2026-33010?
Upgrade mcp-memory-service to 10.25.1 or later.
Is CVE-2026-33010 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-33010 exists.
Other vulnerabilities in doobidoo mcp-memory-service
Sources
Also known as GHSA-g9rg-8vq5-mpwm, PYSEC-2026-2625.