CVE-2026-33010
CVE-2026-33010 · mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.25.1, when the HTTP server is enabled (MCP_HTTP_ENABLED=true), the application configures FastAPI's CORSMiddleware with allow_origins=['*'], allow_credentials=True, allow_methods=["*"], and allow_headers=["*"]. The wildcard Access-Control-Allow-Origin: * header permits any website to read API responses cross-origin. When combined with anonymous access (MCP_ALLOW_ANONYMOUS_ACCESS=true) - the simplest way to get the HTTP dashboard working without OAuth - no credentials are needed, so any malicious website can silently read, modify, and delete all stored memories. This issue has been patched in version 10.25.1.
CVSS 8.1 · Высокий · EPSS 0,4% · Есть исправление
- Опубликовано
- Обновлено
Стек: python
Затронутые продукты и версии
mcp-memory-service
- Версии
- < 10.25.1: Затронуто
Нет опубликованного исправления
mcp-memory-service PyPI
- Версии
- 10.0.0
- 10.0.1
- 10.0.2
- 10.0.3
- 10.1.0
- 10.1.1
- 10.1.2
- 10.10.0
- 10.10.1
- 10.10.2
- 10.10.3
- 10.10.4
- 10.10.5
- 10.10.6
- 10.11.0
- 10.11.1
- 10.11.2
- 10.12.0
- 10.12.1
- 10.13.0
- 10.13.1
- 10.13.2
- 10.14.0
- 10.15.0
- 10.15.1
- 10.16.0
- 10.16.1
- 10.17.0
- 10.17.10
- 10.17.12
- 10.17.13
- 10.17.14
- 10.17.15
- 10.17.16
- 10.17.2
- 10.17.3
- 10.17.4
- 10.17.5
- 10.17.6
- 10.17.7
- 10.17.8
- 10.17.9
- 10.18.0
- 10.18.1
- 10.18.2
- 10.18.3
- 10.19.0
- 10.2.0
- 10.2.1
- 10.20.0
- 10.20.1
- 10.20.2
- 10.20.4
- 10.20.5
- 10.20.6
- 10.21.0
- 10.21.1
- 10.22.0
- 10.23.0
- 10.24.0
- 10.25.0
- 10.3.0
- 10.4.0
- 10.4.1
- 10.4.2
- 10.4.3
- 10.4.4
- 10.4.5
- 10.4.6
- 10.5.0
- 10.5.1
- 10.6.0
- 10.6.1
- 10.7.0
- 10.7.1
- 10.7.2
- 10.8.0
- 10.9.0
- 8.24.0
- 8.25.1
- 8.25.2
- 8.26.0
- 8.27.0
- 8.27.1
- 8.27.2
- 8.28.0
- 8.28.1
- 8.29.0
- 8.30.0
- 8.31.0
- 8.32.0
- 8.33.0
- 8.34.0
- 8.35.0
- 8.36.0
- 8.36.1
- 8.37.0
- 8.38.0
- 8.38.1
- 8.39.0
- 8.39.1
- 8.40.0
- 8.41.0
- 8.41.1
- 8.41.2
- 8.42.0
- 8.42.1
- 8.43.0
- 8.44.0
- 8.45.0
- 8.45.1
- 8.45.2
- 8.45.3
- 8.46.0
- 8.46.1
- 8.46.2
- 8.46.3
- 8.47.0
- 8.47.1
- 8.48.0
- 8.48.1
- 8.48.2
- 8.48.3
- 8.48.4
- 8.49.0
- 8.50.0
- 8.50.1
- 8.51.0
- 8.52.0
- 8.52.1
- 8.52.2
- 8.53.0
- 8.54.0
- 8.54.1
- 8.54.2
- 8.54.3
- 8.54.4
- 8.55.0
- 8.57.1
- 8.58.0
- 8.59.0
- 8.60.0
- 8.61.0
- 8.61.1
- 8.61.2
- 8.62.0
- 8.62.1
- 8.62.10
- 8.62.11
- 8.62.12
- 8.62.13
- 8.62.2
- 8.62.3
- 8.62.4
- 8.62.5
- 8.62.6
- 8.62.7
- 8.62.8
- 8.62.9
- 8.63.0
- 8.63.1
- 8.64.0
- 8.65.0
- 8.66.0
- 8.67.0
- 8.68.0
- 8.68.1
- 8.68.2
- 8.69.0
- 8.70.0
- 8.71.0
- 8.72.0
- 8.73.0
- 8.74.0
- 8.75.0
- 8.75.1
- 8.76.0
- 9.0.0
- 9.0.1
- 9.0.2
- 9.0.3
- 9.0.4
- 9.0.5
- 9.0.6
- 9.2.0
- 9.2.1
- 9.3.1
- Затронутые диапазоны версий
- ECOSYSTEM: < 10.25.1
Обновитесь до 10.25.1