Mem0 Memory Deletion API Unauthenticated Access Vulnerability

A vulnerability exists in the Mem0 server version 1.0.0, specifically within the memory deletion API endpoint (DELETE /memories/{memory_id}). The server lacks proper authentication and authorization controls, allowing unauthenticated users to delete any memory record from the database. This oversight can lead to unauthorized data loss and potential denial-of-service conditions.

Impact

Exploitation of this vulnerability allows for arbitrary deletion of memory records, causing unauthorized data loss. Additionally, this could disrupt service availability, especially if critical memory entries are removed.