CVE-2026-85093: Cheshire-Cat-Ai Core

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.

Affected products

• Cheshire-Cat-Ai Core: from 1.8.0, up to and including 1.9.2

Published 2026-09-03. Last modified 2026-09-10.