CVE-2026-49291: mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call

June 26, 2026

The HTTP MCP JSON-RPC endpoint at /mcp requires only OAuth read scope for all requests, then dispatches tools/call directly to handlers that include mutating tools. A read-only OAuth client can call store_memory and delete_memory through MCP even though the corresponding REST endpoints require write scope.

References

github.com/advisories/GHSA-2r68-g678-7qr3
github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-2r68-g678-7qr3
nvd.nist.gov/vuln/detail/CVE-2026-49291
pypi.org/project/mcp-memory-service/10.65.3
web.archive.org/web/20260508112116/https://github.com/doobidoo/mcp-memory-service

Code Behaviors & Features

Detect and mitigate CVE-2026-49291 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →