CVE-2026-75110 MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET
Unauthenticated attackers can bypass authentication and gain full admin access if the INTERNAL_SERVICE_SECRET environment variable is unset in enabled auth deployments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-75110?
CVE-2026-75110 is a critical authentication bypass vulnerability in MemTensor MemOS, published on 17 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header also yields None, so the comparison None == None evaluates true. The request is then treated as a trusted internal principal and granted scopes: ["all"]. As a result, an unauthenticated remote attacker can reach the admin API-key management endpoints to mint API keys for any user, enumerate keys, revoke keys, and generate a master key for persistent privileged access, as well as all data endpoints.
Weakness: CWE-697
Which versions are affected by CVE-2026-75110?
How do I fix CVE-2026-75110?
No fix has been published for CVE-2026-75110 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-75110 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-75110 exists.
Sources
Also known as GHSA-v9vw-ccqp-q298.