Path Traversal Vulnerability in Memos by UseMemos

CVE-2025-56760

What is CVE-2025-56760?

Memos, an application developed by UseMemos, contains a path traversal vulnerability that arises when the application is configured to store objects locally. This vulnerability allows an attacker to exploit the CreateResource endpoint by injecting a path traversal sequence into the resource name within a crafted request. As a result, the attacker can write arbitrary files on the server, potentially compromising sensitive data and server integrity. Users of Memos versions 0.22 and later should ensure that safeguards are in place to mitigate this risk.

References