PT-2026-53167 · Undefined · Undefined

Published 2026-06-28 · Updated 2026-06-28 · CVE-2026-13511

NVD

CVSS v2.0

2.1

Low

Base vector

AV:N/AC:H/Au:S/C:P/I:N/A:N

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the component Memory REST API. Executing a manipulation of the argument conversationId can lead to improper authorization. The attack may be performed from remote. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-13511

Affected Products

Undefined

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-13511 · Security Note
• https://github.com/VoltAgent/voltagent/pull/1317 · Note
• https://github.com/VoltAgent/voltagent/issues/1315 · Note
• https://github.com/VoltAgent/voltagent · Note
• https://vuldb.com/vuln/374519/cti · Note
• https://vuldb.com/submit/838873 · Note
• https://vuldb.com/cve/CVE-2026-13511 · Note
• https://vuldb.com/vuln/374519 · Note