CVE-2026-13511 | VoltAgent up to 2.1.17 Memory REST API memory.handlers.ts handleGetMemoryConversation conversationId improper authorization (Issue 1315 / EUVD-2026-40008)

A vulnerability was found in . Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the component Memory REST API. Executing a manipulation of the argument conversationId can lead to improper authorization.

This vulnerability appears as CVE-2026-13511. The attack may be performed from remote. In addition, an exploit is available.

The pull request to fix this issue awaits acceptance.