All 6 CVE vulnerabilities found in letta, with AI-generated Chinese analysis, references, and POCs.
Vendor: letta-ai
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-77938 | Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance CWE-526 | 6.5 | Medium | 2026-10-20 |
| CVE-2026-77937 | Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header CWE-639 | 8.1 | High | 2026-10-20 |
| CVE-2026-77936 | Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access CWE-1188 | 9.8 | Critical | 2026-10-20 |
| CVE-2026-4965 | letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection CWE-95 | 7.3 | High | 2026-03-27 |
| CVE-2026-4964 | letta-ai letta File URL message_helper.py _convert_message_create_to_message server-side request forgery CWE-918 | 6.3 | Medium | 2026-03-27 |
| CVE-2025-6101 | letta-ai letta interface.py function_message eval injection CWE-95 | 5.5 | Medium | 2025-06-16 |
All 6 known CVE vulnerabilities affecting letta with full Chinese analysis, references, and POCs where available.