GCVE - cpe:2.3:a:letta:letta:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:letta:letta:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Letta (`40ad7a11-cd15-55d5-8465-086a89accb34`)
Product	Letta (`e614ead5-83d9-5a7c-b1d7-ee22d2161177`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/letta-ai/letta`	purl2cpe	2026-07-28 16:40:55.216254
`pkg:pypi/letta`	purl2cpe	2026-07-28 16:40:55.216255
`pkg:sourceforge/letta.mirror`	purl2cpe	2026-06-01 10:12:33.838858

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-77938`	vulnerable	2026-11-03 10:15:18.082291	Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance MEDIUM (6.5) Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys, then access cross-tenant database data. Published: 2026-10-20T00:46:15.564Z Updated: 2026-10-20T13:47:53.481Z Open on db.gcve.eu Reference links https://www.lasso.security/vulnerability-database/cve-2026-77938 https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/services/tool_sandbox/base.py#L487 https://www.vulncheck.com/advisories/letta-through-0.16.8-credential-exposure-via-tool-sandbox-environment-inheritance	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-77937`	vulnerable	2026-11-03 10:15:17.876800	Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header HIGH (8.1) Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attackers can set user_id to another tenant's ID, even with LETTA_SERVER_SECURE enabled, to read and modify that user's agents, memory and configuration. Published: 2026-10-20T00:46:14.829Z Updated: 2026-10-20T13:48:37.840Z Open on db.gcve.eu Reference links https://www.lasso.security/vulnerability-database/cve-2026-77937 https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/server/rest_api/dependencies.py#L39 https://www.vulncheck.com/advisories/letta-through-0.16.8-cross-tenant-impersonation-via-user-id-header	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-77936`	vulnerable	2026-11-03 10:15:17.377721	Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access CRITICAL (9.8) Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST /v1/tools/run, manage /v1/admin users, or run OS commands via COPY PROGRAM. Published: 2026-10-20T00:46:14.144Z Updated: 2026-10-20T16:07:28.161Z Open on db.gcve.eu Reference links https://www.lasso.security/vulnerability-database/cve-2026-77936 https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/compose.yaml#L17 https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/server/rest_api/app.py#L799 https://www.vulncheck.com/advisories/letta-through-0.16.8-insecure-default-configuration-unauthenticated-api-and-postgresql-access	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4965`	vulnerable	2026-06-08 08:07:02.718507	letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection HIGH (7.3) A vulnerability was detected in letta-ai letta 0.16.4. This issue affects the function resolve_type of the file letta/functions/ast_parsers.py of the component Incomplete Fix CVE-2025-6101. Performing a manipulation results in improper neutralization of directives in dynamically evaluated code. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-27T17:41:46.743Z Updated: 2026-03-27T22:07:55.514Z Open on db.gcve.eu Reference links https://vuldb.com/?id.353842 https://vuldb.com/?ctiid.353842 https://vuldb.com/?submit.777654 https://gist.github.com/YLChen-007/fc09bc447a73bba526c1642d9ce73ca5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4964`	vulnerable	2026-06-08 08:07:02.716980	letta-ai letta File URL message_helper.py _convert_message_create_to_message server-side request forgery MEDIUM (6.3) A security vulnerability has been detected in letta-ai letta 0.16.4. This vulnerability affects the function _convert_message_create_to_message of the file letta/helpers/message_helper.py of the component File URL Handler. Such manipulation of the argument ImageContent leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-27T17:05:22.689Z Updated: 2026-03-31T15:11:01.435Z Open on db.gcve.eu Reference links https://vuldb.com/?id.353841 https://vuldb.com/?ctiid.353841 https://vuldb.com/?submit.777645 https://gist.github.com/YLChen-007/fde4d5ed6ac4aa876f73f8954c6214da	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Letta

Notes

PURL mappings

Vulnerability references

Contribute