High
VoltAgent Memory API Handlers Missing Ownership Checks
Type: advisorySources: OSV
VoltAgent through 2.1.20 fails to validate conversation ownership in memory API handlers, allowing authenticated users to access other users' conversations. Attackers can read, modify, and delete arbitrary conversations and messages by supplying caller-controlled identifiers to memory endpoints.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-82283
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 01:38 UTC · Revision 1
Source evidence
VoltAgent Memory API Handlers Missing Ownership Checks
core-osv · Original sourcePublished 28 Aug 2026, 16:19 UTC
VoltAgent through 2.1.20 fails to validate conversation ownership in memory API handlers, allowing authenticated users to access other users' conversations. Attackers can read, modify, and delete arbitrary conversations and messages by supplying caller-controlled identifiers to memory endpoints.
osv:CVE-2026-82283
Complete source record
{
"id": "b7256f0aa31694417cca7ae9414a3525ab1b03982ddbc00971c4927b2bd50866",
"url": "https://osv.dev/vulnerability/CVE-2026-82283",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "VoltAgent Memory API Handlers Missing Ownership Checks",
"summary": "VoltAgent through 2.1.20 fails to validate conversation ownership in memory API handlers, allowing authenticated users to access other users' conversations. Attackers can read, modify, and delete arbitrary conversations and messages by supplying caller-controlled identifiers to memory endpoints.",
"evidence": "osv:CVE-2026-82283",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-82283",
"aliases": [
"CVE-2026-82283"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/voltagent/voltagent",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "4deb794702792198909def89fe55e17d6d235c4c"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"last_affected": "2.1.20"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"introduced": "0"
},
{
"last_affected": "2.1.20"
}
],
"source": "DESCRIPTION"
}
]
}
}
],
"versions": [
"@voltagent/server-core@2.1.20",
"@voltagent/mcp-server@2.1.0",
"@voltagent/docs-mcp@2.0.3",
"@voltagent/core@2.9.2",
"@voltagent/core@2.9.0",
"@voltagent/server-core@2.1.19",
"@voltagent/sandbox-e2b@2.0.3",
"@voltagent/sandbox-daytona@2.0.3",
"@voltagent/sandbox-blaxel@2.1.1",
"@voltagent/core@2.8.1",
"@voltagent/core@2.8.0",
"@voltagent/core@2.7.7",
"@voltagent/serverless-hono@2.0.12",
"@voltagent/server-hono@2.0.14",
"@voltagent/server-elysia@2.0.9",
"@voltagent/server-core@2.1.18",
"@voltagent/core@2.7.6",
"@voltagent/server-core@2.1.17",
"@voltagent/core@2.7.5",
"@voltagent/sandbox-blaxel@2.1.0",
"@voltagent/sdk@2.0.3",
"@voltagent/core@2.7.4",
"@voltagent/server-hono@2.0.13",
"@voltagent/server-core@2.1.16",
"@voltagent/core@2.7.3",
"@voltagent/server-core@2.1.15",
"@voltagent/core@2.7.2",
"@voltagent/server-hono@2.0.12",
"@voltagent/server-hono@2.0.11",
"@voltagent/serverless-hono@2.0.11",
"@voltagent/server-hono@2.0.10",
"@voltagent/server-elysia@2.0.8",
"@voltagent/server-core@2.1.14",
"@voltagent/core@2.7.1",
"@voltagent/server-hono@2.0.9",
"@voltagent/server-elysia@2.0.7",
"@voltagent/server-core@2.1.13",
"@voltagent/a2a-server@2.0.3",
"@voltagent/serverless-hono@2.0.10",
"@voltagent/server-core@2.1.12",
"@voltagent/core@2.7.0",
"@voltagent/server-core@2.1.11",
"@voltagent/core@2.6.14",
"@voltagent/core@2.6.13",
"@voltagent/ag-ui@1.0.7",
"@voltagent/core@2.6.12",
"@voltagent/core@2.6.11",
"@voltagent/server-hono@2.0.8",
"@voltagent/core@2.6.10",
"@voltagent/ag-ui@1.0.6",
"@voltagent/core@2.6.8",
"@voltagent/server-core@2.1.10",
"@voltagent/core@2.6.7",
"@voltagent/server-core@2.1.9",
"@voltagent/resumable-streams@2.0.2",
"@voltagent/core@2.6.6",
"@voltagent/core@2.6.5",
"@voltagent/ag-ui@1.0.5",
"create-voltagent-app@0.2.19",
"@voltagent/core@2.6.4",
"@voltagent/core@2.6.3",
"@voltagent/core@2.6.2",
"@voltagent/langfuse-exporter@2.0.3",
"@voltagent/evals@2.0.4",
"@voltagent/core@2.6.1",
"@voltagent/core@2.6.0",
"@voltagent/server-core@2.1.8",
"@voltagent/core@2.5.0",
"@voltagent/supabase@2.1.3",
"@voltagent/serverless-hono@2.0.9",
"@voltagent/server-hono@2.0.7",
"@voltagent/server-elysia@2.0.6",
"@voltagent/server-core@2.1.7",
"@voltagent/postgres@2.1.2",
"@voltagent/libsql@2.1.2",
"@voltagent/core@2.4.4",
"@voltagent/cloudflare-d1@2.1.2",
"@voltagent/core@2.4.3",
"@voltagent/core@2.4.2",
"@voltagent/ag-ui@1.0.4",
"@voltagent/server-core@2.1.6",
"@voltagent/sandbox-e2b@2.0.2",
"@voltagent/sandbox-daytona@2.0.2",
"@voltagent/core@2.4.1",
"@voltagent/scorers@2.1.0",
"@voltagent/core@2.4.0",
"@voltagent/core@2.3.8",
"@voltagent/voltagent-memory@1.0.4",
"@voltagent/supabase@2.1.2",
"@voltagent/server-elysia@2.0.5",
"@voltagent/server-core@2.1.5",
"@voltagent/postgres@2.1.1",
"@voltagent/libsql@2.1.1",
"@voltagent/core@2.3.7",
"@voltagent/cloudflare-d1@2.1.1",
"@voltagent/supabase@2.1.1",
"@voltagent/core@2.3.6",
"@voltagent/serverless-hono@2.0.8",
"@voltagent/server-hono@2.0.6",
"@voltagent/server-elysia@2.0.4",
"@voltagent/serverless-hono@2.0.7",
"@voltagent/server-hono@2.0.5",
"@voltagent/server-elysia@2.0.3",
"@voltagent/server-core@2.1.4",
"@voltagent/sandbox-e2b@2.0.1",
"@voltagent/sandbox-daytona@2.0.1",
"@voltagent/core@2.3.5",
"@voltagent/core@2.3.4",
"@voltagent/ag-ui@1.0.3",
"@voltagent/supabase@2.1.0",
"@voltagent/postgres@2.1.0",
"@voltagent/libsql@2.1.0",
"@voltagent/core@2.3.3",
"@voltagent/cloudflare-d1@2.1.0",
"@voltagent/voice@2.1.0",
"@voltagent/core@2.3.1",
"@voltagent/core@2.3.0",
"@voltagent/server-elysia@2.0.2",
"@voltagent/core@2.2.2",
"@voltagent/core@2.2.1",
"@voltagent/core@2.2.0",
"@voltagent/serverless-hono@2.0.6",
"@voltagent/server-hono@2.0.4",
"@voltagent/server-elysia@2.0.1",
"@voltagent/server-core@2.1.3",
"@voltagent/evals@2.0.3",
"@voltagent/core@2.1.6",
"@voltagent/core@2.1.5",
"@voltagent/core@2.1.4",
"@voltagent/internal@1.0.3",
"@voltagent/core@2.1.3",
"@voltagent/core@2.1.2",
"create-voltagent-app@0.2.18",
"@voltagent/scorers@2.0.4",
"@voltagent/core@2.1.1",
"@voltagent/core@2.1.0",
"@voltagent/scorers@2.0.3",
"@voltagent/core@2.0.14",
"@voltagent/core@2.0.13",
"@voltagent/core@2.0.12",
"@voltagent/core@2.0.11",
"@voltagent/core@2.0.10",
"@voltagent/cli@0.1.21",
"create-voltagent-app@0.2.17",
"@voltagent/serverless-hono@2.0.5",
"@voltagent/server-hono@2.0.3",
"@voltagent/server-core@2.1.2",
"@voltagent/resumable-streams@2.0.1",
"@voltagent/core@2.0.7",
"@voltagent/core@2.0.6",
"@voltagent/core@2.0.5",
"@voltagent/cloudflare-d1@2.0.4",
"@voltagent/serverless-hono@2.0.4",
"@voltagent/server-core@2.1.1",
"@voltagent/core@2.0.4",
"@voltagent/core@2.0.3",
"@voltagent/serverless-hono@2.0.3",
"@voltagent/server-elysia@2.0.0",
"@voltagent/server-core@2.1.0",
"create-voltagent-app@0.2.14",
"@voltagent/voltagent-memory@1.0.2",
"@voltagent/voice@2.0.2",
"@voltagent/vercel-ai-exporter@2.0.2",
"@voltagent/supabase@2.0.2",
"@voltagent/serverless-hono@2.0.2",
"@voltagent/server-hono@2.0.2",
"@voltagent/server-core@2.0.2",
"@voltagent/sdk@2.0.2",
"@voltagent/scorers@2.0.2",
"@voltagent/rag@1.0.2",
"@voltagent/postgres@2.0.2",
"@voltagent/mcp-server@2.0.2",
"@voltagent/logger@2.0.2",
"@voltagent/libsql@2.0.2",
"@voltagent/langfuse-exporter@2.0.2",
"@voltagent/internal@1.0.2",
"@voltagent/evals@2.0.2",
"@voltagent/docs-mcp@2.0.2",
"@voltagent/core@2.0.2",
"@voltagent/cli@0.1.20",
"@voltagent/ag-ui@1.0.2",
"@voltagent/a2a-server@2.0.2",
"@voltagent/libsql@1.1.0",
"@voltagent/core@1.5.2",
"@voltagent/server-hono@1.2.11",
"@voltagent/server-core@1.0.36",
"@voltagent/server-hono@1.2.10",
"@voltagent/server-core@1.0.35",
"@voltagent/core@1.5.1",
"@voltagent/core@1.5.0",
"@voltagent/core@1.4.0",
"@voltagent/core@1.3.0",
"@voltagent/server-hono@1.2.9",
"@voltagent/rag@0.0.1",
"@voltagent/server-core@1.0.34",
"@voltagent/ag-ui@0.1.0",
"create-voltagent-app@0.2.13",
"@voltagent/core@1.2.21",
"@voltagent/core@1.2.20",
"@voltagent/core@1.2.19",
"@voltagent/core@1.2.18",
"@voltagent/serverless-hono@1.0.10",
"@voltagent/server-hono@1.2.8",
"@voltagent/server-core@1.0.33",
"@voltagent/voltagent-memory@0.1.5",
"@voltagent/supabase@1.0.11",
"@voltagent/serverless-hono@1.0.9",
"@voltagent/server-hono@1.2.7",
"@voltagent/server-core@1.0.32",
"@voltagent/postgres@1.1.4",
"@voltagent/libsql@1.0.14",
"@voltagent/core@1.2.17",
"@voltagent/server-hono@1.2.6",
"@voltagent/server-core@1.0.31",
"@voltagent/cli@0.1.17",
"@voltagent/server-core@1.0.30",
"@voltagent/core@1.2.16",
"@voltagent/core@1.2.15",
"@voltagent/core@1.2.14",
"@voltagent/server-core@1.0.29",
"@voltagent/core@1.2.13",
"@voltagent/supabase@1.0.10",
"@voltagent/postgres@1.1.3",
"@voltagent/libsql@1.0.13",
"@voltagent/core@1.2.11",
"@voltagent/server-core@1.0.27",
"@voltagent/core@1.2.10",
"@voltagent/server-hono@1.2.5",
"@voltagent/server-core@1.0.26",
"@voltagent/core@1.2.9",
"@voltagent/serverless-hono@1.0.8",
"@voltagent/core@1.2.8",
"@voltagent/scorers@1.0.2",
"@voltagent/evals@1.0.4",
"@voltagent/core@1.2.7",
"@voltagent/voltagent-memory@0.1.4",
"@voltagent/supabase@1.0.9",
"@voltagent/serverless-hono@1.0.7",
"@voltagent/server-hono@1.2.4",
"@voltagent/server-core@1.0.25",
"@voltagent/sdk@1.0.2",
"@voltagent/postgres@1.1.2",
"@voltagent/libsql@1.0.12",
"@voltagent/core@1.2.6",
"@voltagent/core@1.2.5",
"@voltagent/core@1.2.4",
"@voltagent/server-core@1.0.24",
"@voltagent/server-core@1.0.23",
"@voltagent/voltagent-memory@0.1.3",
"@voltagent/supabase@1.0.8",
"@voltagent/serverless-hono@1.0.6",
"@voltagent/server-hono@1.2.3",
"@voltagent/server-core@1.0.22",
"@voltagent/postgres@1.1.1",
"@voltagent/libsql@1.0.11",
"@voltagent/core@1.2.3",
"@voltagent/cli@0.1.16",
"@voltagent/core@1.2.2",
"@voltagent/postgres@1.1.0",
"@voltagent/core@1.2.1",
"@voltagent/server-core@1.0.21",
"@voltagent/cli@0.1.15",
"@voltagent/core@1.2.0",
"@voltagent/core@1.1.39",
"@voltagent/core@1.1.38",
"@voltagent/supabase@1.0.7",
"@voltagent/postgres@1.0.11",
"@voltagent/libsql@1.0.10",
"@voltagent/core@1.1.37",
"@voltagent/server-hono@1.2.2",
"@voltagent/server-core@1.0.20",
"@voltagent/logger@1.0.4",
"@voltagent/core@1.1.36",
"@voltagent/cli@0.1.14",
"@voltagent/core@1.1.35",
"@voltagent/server-hono@1.2.1",
"@voltagent/core@1.1.34",
"@voltagent/server-hono@1.2.0",
"@voltagent/core@1.1.33",
"@voltagent/server-hono@1.1.0",
"@voltagent/core@1.1.32",
"@voltagent/server-hono@1.0.26",
"@voltagent/server-core@1.0.19",
"@voltagent/server-hono@1.0.25",
"@voltagent/server-hono@1.0.24",
"@voltagent/server-core@1.0.18",
"@voltagent/core@1.1.31",
"@voltagent/server-hono@1.0.23",
"@voltagent/server-core@1.0.17",
"create-voltagent-app@0.2.11",
"ai-ad-generator@0.1.1",
"@voltagent/voltagent-memory@0.1.2",
"@voltagent/vercel-ai-exporter@1.0.2",
"@voltagent/supabase@1.0.6",
"@voltagent/serverless-hono@1.0.5",
"@voltagent/server-hono@1.0.22",
"@voltagent/server-core@1.0.16",
"@voltagent/sdk@1.0.1",
"@voltagent/scorers@1.0.1",
"@voltagent/postgres@1.0.10",
"@voltagent/mcp-server@1.0.3",
"@voltagent/logger@1.0.3",
"@voltagent/libsql@1.0.9",
"@voltagent/langfuse-exporter@1.1.3",
"@voltagent/internal@0.0.12",
"@voltagent/evals@1.0.3",
"@voltagent/docs-mcp@1.0.21",
"@voltagent/core@1.1.30",
"@voltagent/cli@0.1.13",
"@voltagent/a2a-server@1.0.2",
"@voltagent/server-hono@1.0.21",
"@voltagent/server-hono@1.0.19",
"@voltagent/evals@1.0.2",
"@voltagent/core@1.1.29",
"@voltagent/evals@1.0.1",
"@voltagent/core@1.1.28",
"@voltagent/server-hono@1.0.18",
"@voltagent/mcp-server@1.0.2",
"@voltagent/core@1.1.26",
"@voltagent/server-hono@1.0.17",
"@voltagent/core@1.1.25",
"ai-ad-generator@0.1.0",
"@voltagent/voltagent-memory@0.1.1",
"@voltagent/server-hono@1.0.16",
"@voltagent/server-core@1.0.15",
"@voltagent/postgres@1.0.8",
"@voltagent/core@1.1.24",
"@voltagent/core@1.1.23",
"@voltagent/serverless-hono@1.0.3",
"@voltagent/server-hono@1.0.15",
"@voltagent/server-core@1.0.14",
"@voltagent/docs-mcp@1.0.16",
"@voltagent/core@1.1.21",
"@voltagent/serverless-hono@1.0.1",
"@voltagent/server-core@1.0.12",
"@voltagent/core@1.1.20",
"@voltagent/cli@0.1.11",
"@voltagent/core@1.1.19",
"@voltagent/core@1.1.18",
"@voltagent/core@1.1.17",
"@voltagent/server-hono@1.0.13",
"@voltagent/server-hono@1.0.11",
"@voltagent/server-core@1.0.10",
"@voltagent/core@1.1.16",
"@voltagent/server-hono@1.0.10",
"@voltagent/server-hono@1.0.9",
"@voltagent/server-hono@1.0.8",
"@voltagent/core@1.1.15",
"@voltagent/core@1.1.14",
"@voltagent/supabase@1.0.4",
"@voltagent/server-hono@1.0.7",
"@voltagent/server-core@1.0.9",
"@voltagent/postgres@1.0.7",
"@voltagent/mcp-server@1.0.1",
"@voltagent/logger@1.0.2",
"@voltagent/libsql@1.0.6",
"@voltagent/internal@0.0.11",
"@voltagent/core@1.1.13",
"@voltagent/a2a-server@1.0.1",
"create-voltagent-app@0.2.10",
"@voltagent/core@1.1.12",
"@voltagent/postgres@1.0.6",
"@voltagent/core@1.1.11",
"@voltagent/voice@1.0.2",
"@voltagent/supabase@1.0.3",
"@voltagent/server-hono@1.0.6",
"@voltagent/server-core@1.0.8",
"@voltagent/postgres@1.0.5",
"@voltagent/libsql@1.0.5",
"@voltagent/langfuse-exporter@1.1.2",
"@voltagent/docs-mcp@1.0.14",
"@voltagent/core@1.1.10",
"@voltagent/core@1.1.9",
"@voltagent/postgres@1.0.4",
"@voltagent/libsql@1.0.4",
"@voltagent/core@1.1.8",
"@voltagent/voice@1.0.1",
"@voltagent/vercel-ai-exporter@1.0.1",
"@voltagent/supabase@1.0.2",
"@voltagent/server-hono@1.0.5",
"@voltagent/server-core@1.0.7",
"@voltagent/postgres@1.0.3",
"@voltagent/libsql@1.0.3",
"@voltagent/langfuse-exporter@1.1.1",
"@voltagent/docs-mcp@1.0.2",
"@voltagent/core@1.1.7",
"@voltagent/core@1.1.6",
"@voltagent/server-core@1.0.6",
"@voltagent/postgres@1.0.2",
"@voltagent/libsql@1.0.2",
"@voltagent/core@1.1.5",
"@voltagent/supabase@1.0.1",
"@voltagent/server-hono@1.0.4",
"@voltagent/server-core@1.0.5",
"@voltagent/postgres@1.0.1",
"@voltagent/logger@1.0.1",
"@voltagent/libsql@1.0.1",
"@voltagent/internal@0.0.10",
"@voltagent/core@1.1.4",
"@voltagent/core@1.1.3",
"@voltagent/server-core@1.0.4",
"@voltagent/core@1.1.2",
"@voltagent/server-hono@1.0.3",
"@voltagent/server-core@1.0.3",
"@voltagent/langfuse-exporter@1.1.0",
"@voltagent/core@1.1.1",
"@voltagent/server-hono@2.0.0",
"@voltagent/server-core@2.0.0",
"@voltagent/core@1.1.0",
"@voltagent/server-hono@1.0.2",
"@voltagent/server-core@1.0.2",
"@voltagent/server-hono@1.0.1",
"@voltagent/server-core@1.0.1",
"@voltagent/docs-mcp@1.0.1",
"@voltagent/core@1.0.1",
"create-voltagent-app@0.2.9",
"@voltagent/voice@1.0.0",
"@voltagent/vercel-ai-exporter@1.0.0",
"@voltagent/supabase@1.0.0",
"@voltagent/server-hono@1.0.0",
"@voltagent/server-core@1.0.0",
"@voltagent/postgres@1.0.0",
"@voltagent/logger@1.0.0",
"@voltagent/libsql@1.0.0",
"@voltagent/langfuse-exporter@1.0.0",
"@voltagent/docs-mcp@1.0.0",
"@voltagent/core@1.0.0",
"@voltagent/core@0.1.86",
"@voltagent/core@0.1.85",
"@voltagent/vercel-ui@1.0.1",
"create-voltagent-app@0.2.8",
"@voltagent/xsai@0.3.4",
"@voltagent/vercel-ui@1.0.0",
"@voltagent/vercel-ai@1.0.0",
"@voltagent/docs-mcp@0.2.3",
"@voltagent/core@0.1.84",
"@voltagent/vercel-ui@0.1.10",
"@voltagent/supabase@0.1.20",
"@voltagent/logger@0.1.4",
"@voltagent/internal@0.0.9",
"@voltagent/core@0.1.83",
"@voltagent/xsai@0.3.3",
"@voltagent/voice@0.2.4",
"@voltagent/core@0.1.82",
"@voltagent/core@0.1.81",
"@voltagent/core@0.1.80",
"@voltagent/supabase@0.1.19",
"@voltagent/core@0.1.79",
"@voltagent/vercel-ai@0.1.18",
"@voltagent/supabase@0.1.18",
"@voltagent/supabase@0.1.17",
"@voltagent/postgres@0.1.12",
"@voltagent/core@0.1.78",
"@voltagent/vercel-ui@0.1.9",
"@voltagent/logger@0.1.3",
"@voltagent/internal@0.0.8",
"@voltagent/core@0.1.77",
"@voltagent/groq-ai@0.1.15",
"@voltagent/google-ai@0.4.2",
"@voltagent/core@0.1.76",
"@voltagent/anthropic-ai@0.1.14",
"@voltagent/core@0.1.75",
"create-voltagent-app@0.2.7",
"@voltagent/xsai@0.3.2",
"@voltagent/core@0.1.74",
"create-voltagent-app@0.2.6",
"@voltagent/xsai@0.3.1",
"@voltagent/voice@0.2.3",
"@voltagent/vercel-ui@0.1.8",
"@voltagent/vercel-ai@0.1.17",
"@voltagent/vercel-ai-exporter@0.1.6",
"@voltagent/supabase@0.1.16",
"@voltagent/sdk@0.1.6",
"@voltagent/postgres@0.1.11",
"@voltagent/logger@0.1.2",
"@voltagent/langfuse-exporter@0.1.5",
"@voltagent/internal@0.0.7",
"@voltagent/groq-ai@0.1.14",
"@voltagent/google-ai@0.4.1",
"@voltagent/core@0.1.73",
"@voltagent/cli@0.1.10",
"@voltagent/anthropic-ai@0.1.13",
"@voltagent/core@0.1.72",
"@voltagent/xsai@0.3.0",
"@voltagent/voice@0.2.2",
"@voltagent/core@0.1.71",
"@voltagent/core@0.1.70",
"@voltagent/vercel-ai@0.1.16",
"@voltagent/core@0.1.69",
"@voltagent/supabase@0.1.15",
"@voltagent/postgres@0.1.10",
"@voltagent/core@0.1.68",
"@voltagent/anthropic-ai@0.1.12",
"@voltagent/supabase@0.1.14",
"@voltagent/postgres@0.1.9",
"@voltagent/core@0.1.67",
"@voltagent/vercel-ai@0.1.15",
"@voltagent/core@0.1.66",
"create-voltagent-app@0.2.3",
"@voltagent/vercel-ui@0.1.7",
"@voltagent/logger@0.1.1",
"@voltagent/internal@0.0.6",
"@voltagent/core@0.1.65",
"@voltagent/core@0.1.64",
"create-voltagent-app@0.2.0",
"@voltagent/vercel-ui@0.1.6",
"@voltagent/internal@0.0.5",
"@voltagent/core@0.1.62",
"@voltagent/vercel-ai@0.1.14",
"@voltagent/docs-mcp@0.2.1",
"@voltagent/core@0.1.61",
"create-voltagent-app@0.1.33",
"@voltagent/supabase@0.1.13",
"@voltagent/postgres@0.1.8",
"@voltagent/core@0.1.60",
"@voltagent/core@0.1.59",
"@voltagent/core@0.1.58",
"@voltagent/docs-mcp@0.2.0",
"@voltagent/core@0.1.57",
"@voltagent/vercel-ui@0.1.5",
"@voltagent/core@0.1.56",
"@voltagent/xsai@0.2.4",
"@voltagent/core@0.1.55",
"@voltagent/core@0.1.54",
"@voltagent/core@0.1.53",
"@voltagent/core@0.1.52",
"@voltagent/core@0.1.51",
"@voltagent/core@0.1.50",
"@voltagent/vercel-ui@0.1.4",
"@voltagent/internal@0.0.4",
"@voltagent/core@0.1.49",
"@voltagent/postgres@0.1.7",
"@voltagent/core@0.1.48",
"@voltagent/vercel-ui@0.1.3",
"@voltagent/internal@0.0.3",
"@voltagent/core@0.1.47",
"@voltagent/core@0.1.46",
"@voltagent/vercel-ui@0.1.2",
"@voltagent/postgres@0.1.6",
"@voltagent/core@0.1.45",
"@voltagent/vercel-ui@0.1.1",
"@voltagent/internal@0.0.2",
"@voltagent/core@0.1.44",
"@voltagent/core@0.1.43",
"@voltagent/vercel-ui@0.1.0",
"@voltagent/core@0.1.42",
"@voltagent/core@0.1.41",
"@voltagent/core@0.1.40",
"create-voltagent-app@0.1.28",
"@voltagent/supabase@0.1.12",
"@voltagent/docs-mcp@0.1.1",
"@voltagent/core@0.1.39",
"@voltagent/cli@0.1.8",
"@voltagent/internal@0.0.1",
"@voltagent/google-ai@0.4.0",
"@voltagent/core@0.1.38",
"@voltagent/vercel-ai@0.1.13",
"@voltagent/vercel-ai@0.1.12",
"@voltagent/core@0.1.36",
"@voltagent/core@0.1.35",
"@voltagent/core@0.1.34",
"@voltagent/supabase@0.1.10",
"@voltagent/postgres@0.1.4",
"@voltagent/core@0.1.33",
"@voltagent/xsai@0.2.3",
"@voltagent/supabase@0.1.9",
"@voltagent/postgres@0.1.3",
"@voltagent/groq-ai@0.1.13",
"@voltagent/google-ai@0.3.14",
"@voltagent/core@0.1.32",
"@voltagent/anthropic-ai@0.1.11",
"@voltagent/xsai@0.2.2",
"@voltagent/vercel-ui@0.0.2",
"@voltagent/vercel-ai@0.1.11",
"@voltagent/groq-ai@0.1.12",
"@voltagent/google-ai@0.3.13",
"create-voltagent-app@0.1.26",
"@voltagent/xsai@0.2.1",
"@voltagent/voice@0.2.1",
"@voltagent/vercel-ai@0.1.10",
"@voltagent/vercel-ai-exporter@0.1.5",
"@voltagent/supabase@0.1.8",
"@voltagent/sdk@0.1.5",
"@voltagent/postgres@0.1.2",
"@voltagent/langfuse-exporter@0.1.4",
"@voltagent/groq-ai@0.1.11",
"@voltagent/google-ai@0.3.12",
"@voltagent/core@0.1.31",
"@voltagent/cli@0.1.7",
"@voltagent/anthropic-ai@0.1.10",
"@voltagent/core@0.1.30",
"@voltagent/xsai@0.2.0",
"@voltagent/voice@0.2.0",
"@voltagent/core@0.1.29",
"@voltagent/core@0.1.27",
"@voltagent/core@0.1.26",
"@voltagent/core@0.1.25",
"@voltagent/vercel-ai-exporter@0.1.4",
"@voltagent/vercel-ai-exporter@0.1.3",
"@voltagent/supabase@0.1.7",
"@voltagent/sdk@0.1.4",
"@voltagent/postgres@0.1.1",
"@voltagent/core@0.1.24",
"@voltagent/vercel-ai-exporter@0.1.2",
"@voltagent/sdk@0.1.3",
"@voltagent/postgres@0.1.0",
"@voltagent/groq-ai@0.1.10",
"@voltagent/core@0.1.22",
"@voltagent/anthropic-ai@0.1.8",
"voltagent-example-with-vercel-ai-observability@1.0.0",
"@voltagent/vercel-ai-exporter@0.1.1",
"@voltagent/supabase@0.1.6",
"@voltagent/sdk@0.1.1",
"@voltagent/groq-ai@0.1.9",
"@voltagent/google-ai@0.3.11",
"@voltagent/core@0.1.21",
"@voltagent/google-ai@0.3.9",
"@voltagent/xsai@0.1.8",
"@voltagent/google-ai@0.3.8",
"@voltagent/core@0.1.19",
"@voltagent/groq-ai@0.1.7",
"@voltagent/google-ai@0.3.7",
"@voltagent/anthropic-ai@0.1.6",
"@voltagent/google-ai@0.3.6",
"@voltagent/core@0.1.18",
"@voltagent/core@0.1.17",
"@voltagent/anthropic-ai@0.1.4",
"create-voltagent-app@0.1.18",
"@voltagent/xsai@0.1.6",
"@voltagent/voice@0.1.6",
"@voltagent/vercel-ai@0.1.7",
"@voltagent/supabase@0.1.4",
"@voltagent/langfuse-exporter@0.1.2",
"@voltagent/groq-ai@0.1.5",
"@voltagent/google-ai@0.3.4",
"@voltagent/core@0.1.14",
"@voltagent/cli@0.1.5",
"@voltagent/anthropic-ai@0.1.2",
"@voltagent/anthropic-ai@0.1.1",
"create-voltagent-app@0.1.16",
"@voltagent/xsai@0.1.5",
"@voltagent/voice@0.1.5",
"@voltagent/vercel-ai@0.1.6",
"@voltagent/groq-ai@0.1.4",
"@voltagent/google-ai@0.3.3",
"@voltagent/core@0.1.13",
"voltagent-example-with-zapier-mcp@1.0.0",
"@voltagent/langfuse-exporter@0.1.1",
"@voltagent/core@0.1.12",
"create-voltagent-app@0.1.14",
"@voltagent/google-ai@0.3.2",
"@voltagent/core@0.1.11",
"@voltagent/xsai@0.1.4",
"@voltagent/vercel-ai@0.1.5",
"@voltagent/groq-ai@0.1.3",
"@voltagent/google-ai@0.3.1",
"@voltagent/core@0.1.10",
"@voltagent/vercel-ai@0.1.4",
"@voltagent/supabase@0.1.3",
"@voltagent/groq-ai@0.1.2",
"@voltagent/core@0.1.9",
"@voltagent/cli@0.1.4",
"@voltagent/voice@0.1.4",
"@voltagent/groq-ai@0.1.1",
"@voltagent/google-ai@0.3.0",
"@voltagent/core@0.1.8",
"@voltagent/core@0.1.7",
"create-voltagent-app@0.1.11",
"@voltagent/xsai@0.1.3",
"@voltagent/voice@0.1.3",
"@voltagent/vercel-ai@0.1.3",
"@voltagent/supabase@0.1.2",
"@voltagent/google-ai@0.2.0",
"@voltagent/core@0.1.6",
"@voltagent/cli@0.1.3",
"@voltagent/core@0.1.5",
"@voltagent/core@0.1.4",
"@voltagent/supabase@0.1.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82283.json"
}
}
],
"modified": "2026-10-28T02:30:48.619304237Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82283.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-82283",
"https://www.vulncheck.com/advisories/voltagent-memory-api-handlers-missing-ownership-checks",
"https://github.com/VoltAgent/voltagent/issues/1371",
"https://github.com/VoltAgent/voltagent",
"https://github.com/VoltAgent/voltagent/blob/44b4c8e4998ce56095b2f0e4eaf1a988f5e6d0de/packages/server-core/src/handlers/memory.handlers.ts"
],
"provider_metadata": {
"cwe_ids": [
"CWE-639"
],
"cna_assigner": "VulnCheck",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82283.json"
}
},
"related_cves": [
{
"value": "CVE-2026-82283",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 517042,
"published_at": "2026-08-28T16:19:02.446+00:00"
}