CVE-2026-54519

Name of the Vulnerable Software and Affected Versions AI Agent Automation versions prior to 0.9.1

Description An issue exists in the backend/src/controllers/memory.controller.js file where requests are authenticated, but the listMemories, deleteMemory, and clearAgentMemory functions fail to verify if the record associated with the caller-supplied agentId or memory id belongs to the req.user. This lack of ownership verification allows an authenticated attacker with knowledge of another user's identifiers to access sensitive AgentMemory content, such as conversation history, agent context, task data, embeddings, and metadata. Additionally, the attacker can delete specific memories or clear all memory for a victim agent, resulting in a breach of tenant isolation, unauthorized data disclosure, and data loss.

Recommendations Update to version 0.9.1.