CVE-2026-112157: memmy-agent 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0, 1.1.1, 1.2.0, 1.2.1, 1.2.2

Affected technology

memmy-agent · 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0, 1.1.1, 1.2.0, 1.2.1, 1.2.2
MemTensor

Description’s affected range: up to 1.0.9/1.1.1/1.2.2

Component: Memory Service
Function: requireAdminWrite
File: Memory/src/server/http.ts

Attack conditions (VulDB, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction

What an attacker can do

VulDB’s CVSS 4.0 assessment (base score 1.3/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.