Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-85093 1 Cheshire-cat-ai 1 Core 2026-09-03 6.5 Medium
Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.