Information Disclosure Vulnerability in Cheshire Cat AI's Memory Collection Endpoint

CVE-2026-85093

What is CVE-2026-85093?

Cheshire Cat AI's /memory/collections/{collection_id}/points endpoint exhibits a serious flaw where it does not enforce proper per-user filtering. This oversight allows authenticated users with MEMORY:READ permissions to access and retrieve stored conversation messages and personal data of all users. By paginating through the collection using the offset cursor, attackers can exploit this vulnerability to expose sensitive information, resulting in unauthorized access to private user data.

References