Vendor

    Letta-ai

    7 known vulnerabilities in products by Letta-ai, 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Letta-ai
    CriticalCVE-2026-77936

    Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access

    		9.8
    HighCVE-2026-77937

    Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header

    		8.1
    HighCVE-2026-18990

    letta-ai LettaBot API Status Route server.ts missing authentication

    		7.3
    HighCVE-2026-77938

    Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance

    		6.5
    CriticalCVE-2026-4965

    letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection

    also in 1 other product

    		7.3
    MediumCVE-2026-4964

    Letta: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		6.3
    MediumCVE-2025-6101

    letta-ai letta interface.py function_message eval injection

    		5.5

    Products

    Products by Letta-ai
    Letta60