A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vector_stores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 62dca096f9236010ca15fea9ba369ba740b86b7a. Applying a patch is the recommended action to fix this issue.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump
    of the file mem0/vector_stores/faiss.py. Performing a manipulation results in deserialization. It is
    possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is
    named 62dca096f9236010ca15fea9ba369ba740b86b7a. Applying a patch is the recommended action to fix this
    issue. (CVE-2026-7597)

ID	Name	Product	Family	Type	Severity
461297	Echo: mem0ai: security update to 2.0.0b2	Tenable Cloud Security	Echo Local Security Checks	Local	medium
461297	Echo: mem0ai: security update to 2.0.0b2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
441510	SCA: security update for mem0ai (GHSA-xqxw-r767-67m7)	Tenable Cloud Security	SCA Checks	Local	medium
441510	SCA: security update for mem0ai (GHSA-xqxw-r767-67m7)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-7597

medium

Tenable Plugins

medium

medium

medium

medium