TI-2026-04326 CVE-2026-4965 · GHSA-wmhq-7qrq-wwwj
letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection
Priority HIGH 70
A vulnerability was detected in letta-ai letta 0.16.4.
Vulnerabilities
3 records
TI-2026-04325 CVE-2026-4964 · GHSA-4f2v-q2vh-v8hc
letta-ai letta File URL message_helper.py _convert_message_create_to_message server-side request forgery
Priority MEDIUM 57
A security vulnerability has been detected in letta-ai letta 0.16.4.
TI-2025-32343 CVE-2025-51482 · GHSA-2pgv-8585-494w
Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in…
Priority HIGH 73
Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/t…