Read the docs

letta-ai

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

letta-ai records in CISA KEV

No letta-ai vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-76666 CVE-2026-77936

Insecure default configuration in Letta exposes API and PostgreSQL

Priority HIGH 81

Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with defaul…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00589 Published 2026-10-20 No fix listed CWE-1188
TI-2026-76667 CVE-2026-77937

Letta lets API callers impersonate other users via user_id header

Priority HIGH 72

Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00473 Published 2026-10-20 No fix listed CWE-639
TI-2026-76668 CVE-2026-77938

Letta tool sandbox exposes server secrets to tool users

Priority MEDIUM 64

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00416 Published 2026-10-20 No fix listed CWE-526
Open these records in search →