Skip to content
OpenAdvisories

Vendor

letta-ai

7 known vulnerabilities.

Products

letta 6 LettaBot 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-77938

    Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance

    Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools t…

    letta-ai letta
  • Medium 6.3
    CVE-2026-4964

    letta-ai letta File URL message_helper.py _convert_message_create_to_message server-side request forgery

    A security vulnerability has been detected in letta-ai letta 0.16.4. This vulnerability affects the function _convert_message_create_to_message of the file letta/helpers/message_helper.py of the component File URL Handler. Such manipulation of the argument Im…

    letta-ai letta
  • Medium 5.5
    CVE-2025-6101

    letta-ai letta interface.py function_message eval injection

    A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_message of the file letta/letta/interface.py. The manipulation of the argument function_name/function_args leads to improper neutralization …

    letta-ai letta