CVE-2026-85093
Received Received - Intake

Authenticated Memory Exposure in Cheshire Cat AI via Pagination Bypass

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description
Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-85093
EUVD
EUVD-2026-70303

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cheshire_cat_ai core to 1.9.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Cheshire Cat AI has a vulnerability in its GET /memory/collections/{collection_id}/points endpoint. This endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can access all users' stored conversation messages and personal data by using pagination with an offset cursor.

Impact Analysis

If you use Cheshire Cat AI, an attacker with MEMORY:READ permission could steal your stored conversation messages and personal data. This could lead to privacy breaches, identity theft, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA due to unauthorized access to personal data. GDPR requires strict data protection and user consent, while HIPAA mandates safeguards for protected health information. A breach could result in legal penalties and loss of compliance certifications.

Mitigation Strategies

Immediately restrict MEMORY:READ permission to only authorized users and audit all accounts with this permission. Disable pagination or implement strict per-user filtering on the GET /memory/collections/{collection_id}/points endpoint to prevent unauthorized data access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85093. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart