Browse all 7 CVE security advisories affecting letta-ai. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-77938 | Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance — letta CWE-526 | 6.5 | Medium | 2026-10-20 |
| CVE-2026-77937 | Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header — letta CWE-639 | 8.1 | High | 2026-10-20 |
| CVE-2026-77936 | Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access — letta CWE-1188 | 9.8 | Critical | 2026-10-20 |
| CVE-2026-18990 | letta-ai LettaBot API Status Route server.ts missing authentication — LettaBot CWE-306 | 7.3 | High | 2026-08-06 |
| CVE-2026-4965 | letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection — letta CWE-95 | 7.3 | High | 2026-03-27 |
| CVE-2026-4964 | letta-ai letta File URL message_helper.py _convert_message_create_to_message server-side request forgery — letta CWE-918 | 6.3 | Medium | 2026-03-27 |
| CVE-2025-6101 | letta-ai letta interface.py function_message eval injection — letta CWE-95 | 5.5 | Medium | 2025-06-16 |
This page lists every published CVE security advisory associated with letta-ai. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.