CVE-2026-112157 | MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2 Memory Service http.ts requireAdminWrite resource consumption (Issue 468)

A vulnerability was found in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. It has been rated as problematic. The impacted element is the function requireAdminWrite of the file Memory/src/server/http.ts of the component Memory Service. This manipulation causes resource consumption.

This vulnerability is registered as CVE-2026-112157. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The exploit is partially overstated. While “POST /api/v1/admin/shutdown” accepts unauthenticated requests when no token is configured, it’s designed for local use and later received cross-origin fixes. Unauthenticated endpoint exposure is confirmed; browser-triggered DoS remains likely but depends on specific browser behavior.VulDB Recent EntriesRead More