Unauthenticated Access in mcp-memory-service

Executive Summary

This vulnerability affects mcp-memory-service, a tool for AI applications. Before version 10.67.1, all HTTP routes under /api/documents/* could be accessed without authentication, even if the server was configured with an API key or OAuth. This allowed unauthenticated attackers to upload, read, or delete memories without credentials. The /api/memories endpoint correctly enforced authentication, creating an inconsistent security boundary.

Useful 0 Not Useful 0

Detection Guidance

Check if the mcp-memory-service is running and verify the version installed. If it is below 10.67.1, the system is vulnerable. Inspect network traffic for requests to /api/documents/* endpoints without authentication headers. Use curl commands to test unauthenticated access to these endpoints, such as: curl http://<server>/api/documents/list or curl -X POST http://<server>/api/documents/upload --data '{"content":"test"}'.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to upload malicious content, steal sensitive data from stored memories, or permanently delete memories belonging to users. This could lead to data breaches, loss of critical information, or disruption of AI application functionality.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate GDPR by exposing personal data without authorization and HIPAA by allowing unauthorized access to protected health information. It undermines data confidentiality and integrity requirements, potentially leading to legal penalties and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade mcp-memory-service to version 10.67.1 or later immediately. If upgrading is not possible, restrict network access to the service using firewalls or network policies. Ensure all /api/documents/* endpoints enforce authentication by verifying configuration files and router dependencies in documents.py.

Useful 0 Not Useful 0