CVE-2026-49291: mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call

June 26, 2026

The HTTP MCP JSON-RPC endpoint at /mcp requires only OAuth read scope for all requests, then dispatches tools/call directly to handlers that include mutating tools. A read-only OAuth client can call store_memory and delete_memory through MCP even though the corresponding REST endpoints require write scope.

References

github.com/advisories/GHSA-2r68-g678-7qr3
github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-2r68-g678-7qr3
nvd.nist.gov/vuln/detail/CVE-2026-49291
pypi.org/project/mcp-memory-service/10.65.3
web.archive.org/web/20260508112116/https://github.com/doobidoo/mcp-memory-service

Code Behaviors & Features

Detect and mitigate CVE-2026-49291 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →