CVE-2026-77936— Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
Quick assessment
Affected
letta-ai letta
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Letta 0.16.8 版本随附的 文件未启用 配置项，导致密码中间件未被加载，所有 API 路由均处于未认证状态。同时，该配置暴露了使用默认凭证的超级用户 PostgreSQL 端口。远程攻击者可利用 接口执行任意 Python 代码，通过 接口管理用户，或借助 功能执行操作系统命令。
Possible ATT&CK Techniques 3 AI
T1068 · Exploitation for Privilege Escalation T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-77936
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
Source: CVE Program / CVE List V5
Vulnerability Description
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST /v1/tools/run, manage /v1/admin users, or run OS commands via COPY PROGRAM.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不安全的默认资源初始化
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-77936
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-77936
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-77936 (1)
Vendor Advisories for CVE-2026-77936 (1)
Other References for CVE-2026-77936 (1)
Same Patch Batch · letta-ai · 2026-10-20 · 3 CVEs total
| CVE-2026-77937 | 8.1 HIGH | Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header |
| CVE-2026-77938 | 6.5 MEDIUM | Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance |
IV. Related Vulnerabilities
Same product: letta
-
CVE-2026-77938
Letta through 0.16.8 Credential Exposure via Tool Sandbox En -
CVE-2026-77937
Letta through 0.16.8 Cross-Tenant Impersonation via user_id -
CVE-2026-4965
letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py r -
CVE-2026-4964
letta-ai letta File URL message_helper.py _convert_message_c -
CVE-2025-6101
letta-ai letta interface.py function_message eval injection
Same vendor: letta-ai
-
CVE-2026-77938
Letta through 0.16.8 Credential Exposure via Tool Sandbox En -
CVE-2026-77937
Letta through 0.16.8 Cross-Tenant Impersonation via user_id -
CVE-2026-18990
letta-ai LettaBot API Status Route server.ts missing authent -
CVE-2026-4965
letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py r -
CVE-2026-4964
letta-ai letta File URL message_helper.py _convert_message_c
Same weakness: CWE-1188
-
CVE-2026-77934
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Co -
CVE-2026-109437
Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backe -
CVE-2026-110769
holaOS through 2026.822.1 Missing Authorization in Channel-G -
CVE-2026-110631
Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via -
CVE-2026-14765
Epic Games Unreal Engine Insecure Default URL Scheme Allowan
V. Comments for CVE-2026-77936
No comments yet