Access Control Vulnerability in Memos by UseMemos
CVE-2025-65796

4.3MEDIUM

Key Information:

Vendor

UseMemos

Status
Memos
Vendor
CVE Published:
8 December 2025

What is CVE-2025-65796?

A vulnerability in Memos version 0.25.2 affects access control mechanisms, allowing users with minimal privileges to delete reactions associated with other users' memos. This flaw could potentially disrupt user interactions and compromise application integrity, making it essential for users of Memos to review their security measures.

References

http://memos.com
http://usememos.com
https://github.com/usememos/memos/pull/5217

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.