mem0 Unauthenticated Config API Exposes LLM Keys and SSRF

Executive Summary

This vulnerability exists in mem0, which has unauthenticated configuration API endpoints. These endpoints expose large language model (LLM) API keys in plaintext, allowing attackers to retrieve sensitive secrets such as OpenAI API keys without authentication. Additionally, attackers can exploit the vulnerability to perform server-side request forgery (SSRF) by manipulating the ollama_base_url parameter to make the server send requests to internal addresses.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability exposes LLM API keys in plaintext through unauthenticated config API endpoints, allowing attackers to retrieve sensitive secrets and perform server-side request forgery. Such exposure of sensitive credentials can lead to unauthorized access and data breaches, which may violate data protection requirements under common standards and regulations like GDPR and HIPAA.

Specifically, the leakage of API keys and potential misuse of internal services could compromise confidentiality and integrity of data, thereby impacting compliance with regulations that mandate strict controls over access to sensitive information.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can have severe impacts including unauthorized disclosure of sensitive API keys, which can lead to misuse of those keys and potential financial or reputational damage. The SSRF capability allows attackers to make the server send requests to internal systems, potentially exposing internal services or data that are not meant to be publicly accessible.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking for unauthenticated access to specific mem0 API endpoints that expose sensitive information or allow SSRF.

• Send a GET request to /api/v1/config/ to see if LLM API keys are exposed in plaintext.
• Send a PUT request to /api/v1/config/mem0/llm with a manipulated ollama_base_url parameter to test if SSRF is possible.

Example commands using curl:

• curl -v http://<target-ip-or-host>/api/v1/config/
• curl -v -X PUT http://<target-ip-or-host>/api/v1/config/mem0/llm -d '{"ollama_base_url":"http://169.254.169.254"}' -H 'Content-Type: application/json'

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting access to the vulnerable API endpoints and applying configuration changes to prevent exploitation.

• Enforce authentication on all configuration API endpoints to prevent unauthenticated access.
• Restrict the ollama_base_url parameter to approved URL schemes and IP address ranges to block SSRF attempts.
• Avoid storing API keys in the configuration database or ensure they are encrypted and not exposed in plaintext.

Additionally, update mem0 to a version that includes fixes for this vulnerability once available.

Useful 0 Not Useful 0