Information Disclosure in Memos Application by UseMemos

CVE-2025-50738

What is CVE-2025-50738?

The Memos application, through version v0.24.3, includes a vulnerability that allows for the embedding of images with arbitrary URLs in markdown. When users view these memos, their browsers automatically fetch the embedded images, thereby exposing critical user information such as the IP address and browser User-Agent string to potential attackers. This can result in unauthorized information disclosure and user tracking, presenting significant risks to user privacy.

References