CVE-2025-65799: Usememos Memos

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal.

Affected products

• Usememos Memos: version 0.25.2 only

Published 2025-12-08. Last modified 2026-07-05.