Mem0 Authentication Bypass Vulnerability in Memory Deletion API Endpoint

A vulnerability exists in the Mem0 server version 1.0.0, where the memory deletion API endpoint lacks proper authentication and authorization controls. This flaw allows unauthenticated users to delete memory records by specifying arbitrary user identifiers in the request query parameters. As a result, a remote attacker could exploit this vulnerability to erase memory data for any user, causing unauthorized data loss and potential denial-of-service.

Impact

Exploitation of this vulnerability leads to unauthorized deletion of user memory data, causing data loss and disrupting service availability.