letta vulnerabilities

CVEs whose affected-version data names the letta package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

4 CVEsRSS

CVE-2026-77937High· 8.1PoC

1w ago

Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header

Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attackers can set user_id to another tenant's ID, even with LETTA_S…

▾ Midnightletta-ai · lettaEPSS 0.47%via CVEORG

CVE-2026-77938Medium· 6.5PoC

1w ago

Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools…

▾ Twilightletta-ai · lettaEPSS 0.42%via CVEORG

CVE-2026-77936Critical· 9.8PoC

1w ago

Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access

Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Re…

▾ Abyssalletta-ai · lettaEPSS 0.59%via CVEORG

CVE-2024-39025High· 7.5

1y ago

Letta (previously MemGPT) incorrect access control vulnerability

▾ Twilightletta · lettaEPSS 0.40%via OSV