product · DiggingBeagle record
Mem0 agent memory framework
Mem0 manages agent and user conversation memory, including identifiers for agents, runs and users. Its memory-key serialization and per-principal isolation are material trust boundaries when multiple identities share backing storage.
- Entity kind
- product
Record description
Mem0 exposes memory operations scoped by user, agent and run identifiers. CVE-2026-116575 concerns string serialization of those distinct identifiers into a delimiter-joined conversation-history key, not a generic hallucinated-memory problem. Under caller-controlled identifiers, colliding scopes may place another tenant’s recent raw messages into LLM extraction and contaminate persistent memory. Safe multi-user integration needs unambiguous identity encoding and authorization independent of client-supplied run names.