CVE-2026-50027 mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
Unauthenticated attackers can read, write, and delete memory documents in mcp-memory-service due to missing authentication on specific API endpoints.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-50027?
CVE-2026-50027 is a critical missing authorization vulnerability in doobidoo mcp-memory-service, published on 14 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
mcp-memory-service is a semantic memory layer for AI applications. Prior to 10.67.1, all HTTP routes under /api/documents/* in mcp-memory-service are served without any authentication dependency, even when the server is configured with an API key (MCP_API_KEY) or OAuth. An unauthenticated remote attacker can upload arbitrary content into the memory store (write), retrieve stored document content (read), and permanently delete memories belonging to authenticated users (delete) — all without supplying any credentials. The /api/memories counterpart correctly enforces authentication, making this an inconsistent and exploitable authentication boundary. This vulnerability is fixed in 10.67.1.
Weakness: CWE-306
Which versions are affected by CVE-2026-50027?
3 open source packages ship an affected version, including mcp-memory-service.
| Package | Affected | Fixed in |
|---|---|---|
mcp-memory-service PyPI | All versions | 10.67.1 |
mcp-memory-service PyPI | All versions | 10.67.1 |
mcp-memory-service PyPI | All versions | 10.67.1 |
How do I fix CVE-2026-50027?
Upgrade mcp-memory-service to 10.67.1 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-50027 being exploited?
There is no known exploitation of CVE-2026-50027 in the wild and no public exploit code.
Sources
Also known as GHSA-84hp-mqvj-3p8h, PYSEC-2026-2624.