Skip to content

Back to the catalog

CVE-2026-49291 | THREATINT
cve.threatint.euadvisory

CVE-2026-49291 | THREATINT

CVE-2026-49291 affects mcp-memory-service, a semantic memory layer for AI apps, in versions before 10.65.3. The HTTP MCP JSON-RPC endpoint `/mcp` requires only the OAuth `read` scope and dispatches `tools/call` to mutating handlers. A read-only client can therefore call `store_memory` and `delete_memory`, bypassing the `write` scope that the REST endpoints enforce. It is classed as CWE-862 Missing Authorization and fixed in 10.65.3.

TL;DR mcp-memory-service <10.65.3: /mcp endpoint only checks OAuth read scope, so read-only clients can store and delete memories (CWE-862).
Open original ↗

Organisations named here

  • GHSA-2r68-g678-7qr3

CVEs named here

  • CVE-2026-49291

Technologies named here

  • mcp-memory-service
  • Model Context Protocol
  • OAuth
  • Python
  • PyPI

Techniques named here

  • Missing Authorization

Also named here

  • CWE-862

Related in AppSec