CVE-2026-75110 | MemTensor MemOS up to 2.0.30 Middleware auth.py is_internal_request INTERNAL_SERVICE_SECRET privileges management

A vulnerability was found in MemTensor MemOS up to 2.0.30. It has been declared as very critical. Impacted is the function is_internal_request of the file src/memos/api/middleware/auth.py of the component Middleware. Such manipulation of the argument INTERNAL_SERVICE_SECRET leads to improper privilege management.

This vulnerability is listed as CVE-2026-75110. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More