CVE-2026-29787 json
mcp-memory-service: System Information Disclosure via Health Endpoint
published 2026-03-05 8 mo ago modified 2026-07-13 3 mo ago also GHSA-73hc-m4hx-79pj , PYSEC-2026-2623 , EUVD-2026-10165
- cvss
- 5.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 35%
- public exploits
- 0
- none known
Summary
mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.21.0, the /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCP_ALLOW_ANONYMOUS_ACCESS=true is set (required for the HTTP server to function without OAuth/API key), this endpoint is accessible without authentication. Combined with the default 0.0.0.0 binding, this exposes sensitive reconnaissance data to the entire network. This issue has been patched in version 10.21.0.
Patch / fix
- pypi mcp-memory-service 10.21.0
- doobidoo mcp-memory-service 10.21.0
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 8 mo ago
Exploit prediction
0.41% chance of exploitation in the next 30 days, higher than 35% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-73hc-m4hx-79pj referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| NVD | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| GitHub | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| OSV | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | mcp-memory-service | <10.21.0 |
10.21.0 |
Affected products
- doobidoo mcp-memory-service
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
github.com
/doobidoo/mcp-memory-service/commit/18f4323ca92763196aa2922f691dfbeb6bd84e48
web, patch
-
github.com
/doobidoo/mcp-memory-service/security/advisories/GHSA-73hc-m4hx-79pj
web, exploit, mitigation, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-29787
advisory
-
github.com
/doobidoo/mcp-memory-service
package
-
pypi.org
/project/mcp-memory-service
package
-
github.com
/advisories/GHSA-73hc-m4hx-79pj
advisory
Sources
- CVE List CVE-2026-29787
- GitHub Advisory GHSA-73hc-m4hx-79pj
- NVD CVE-2026-29787
- OSV PYSEC-2026-2623
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.