Access Control Flaw in Memos Product by usememos
CVE-2025-65795

7.5HIGH

Key Information:

Vendor

usememos

Status
Memos
Vendor
CVE Published:
8 December 2025

What is CVE-2025-65795?

An access control issue in the /api/v1/user endpoint of the Memos product version 0.25.2 permits unauthorized attackers to create arbitrary user accounts by sending specially crafted requests. This vulnerability poses a significant risk as it allows malicious actors to exploit the system, enabling unauthorized access and potential misuse of the platform.

References

http://memos.com
http://usememos.com
https://github.com/usememos/memos/pull/5217

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.