CVE-2026-6634
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
In usememos memos up to 0.22.1, the function memos_access_token in src/App.tsx of the UpdateInstanceSetting component allows manipulation of the additionalStyle/additionalScript arguments, causing improper authorization. The attack can be carried out remotely, and the exploit has been made public. The vendor did not respond.
Risk Assessment
An attacker could remotely exploit the vulnerability to bypass authorization and potentially perform unauthorized actions. The public availability of the exploit increases the risk.
Recommendation
It is recommended to update to a patched version as soon as it becomes available. Until then, restrict access to the administrative interface and monitor for unusual activity.
Other vulnerabilities in usememos memos
See all- CVE-2025-65799Medium
In the Attachment service of usememos memos v0.25.2, a lack of file name validation allows attackers to perform a path traversal. This vulnerability enables access to files outside the intended directory.
- CVE-2025-65797Medium
An incorrect access control vulnerability in the Identity Provider service of usememos memos v0.25.2 allows low-privileged attackers to arbitrarily modify or delete registered identity providers. This can lead to account takeover or Denial of Service (DoS).
- CVE-2025-65795High
An incorrect access control vulnerability in usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request to the /api/v1/user endpoint.
- CVE-2025-65798Medium
In usememos memos version 0.25.2, incorrect access control allows attackers with low-level privileges to arbitrarily modify or delete attachments created by other users.
- CVE-2025-65796Medium
In usememos memos version 0.25.2, an incorrect access control allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.
- CVE-2023-4698High
Improper input validation exists in the GitHub repository usememos/memos prior to version 0.13.2.
- CVE-2023-4697High
Improper Privilege Management exists in the GitHub repository usememos/memos prior to version 0.13.2.
Original NVD description (English source)
A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS