CVE-2026-33010

High · 8.1

CVSS

8.1

EPSS

0.5%

Published

Mar 20, 2026

CISA due date

—

The record

mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.25.1, when the HTTP server is enabled (MCP_HTTP_ENABLED=true), the application configures FastAPI's CORSMiddleware with allow_origins=['*'], allow_credentials=True, allow_methods=["*"], and allow_headers=["*"]. The wildcard Access-Control-Allow-Origin: * header permits any website to read API responses cross-origin. When combined with anonymous access (MCP_ALLOW_ANONYMOUS_ACCESS=true) - the simplest way to get the HTTP dashboard working without OAuth - no credentials are needed, so any malicious website can silently read, modify, and delete all stored memories. This issue has been patched in version 10.25.1.

Affected packages

Ecosystem	Package	Introduced	Fixed
PyPI	mcp-memory-service	0	10.25.1

Related vulnerabilities

GHSA-g9rg-8vq5-mpwm mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft Same vulnerability
CVE-2026-29787 mcp-memory-service is an open-source memory backend for multi-agent systems. Also affects mcp-memory-service