Description
Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | letta | <= 0.3.17 | — | GHSA-7p2g-2vxc-5g55 |
High · 7.5
CVE-2024-39025
EUVD-2024-3565GHSA-7p2g-2vxc-5g55PYSEC-2026-1533
Letta (previously MemGPT) incorrect access control vulnerability
Published Dec 27, 2024 · Updated Dec 31, 2024 · Assigned by mitre