Letta-ai vulnerabilities
We track 4 vulnerabilities in Letta-ai products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
Latest Letta-ai vulnerabilities
- 8.1 High severity
letta: Authorization Bypass Through User-Controlled Key
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attackers can set user_id to another tenant's ID, even with LETTA_SERVER_SECURE enabled, t
- 9.8 Critical severity
letta: Initialization of a Resource with an Insecure Default
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can exec
- 7.3 High severity
LettaBot: Improper Authentication
A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit i
- 9.8 Critical severity
letta: Improper Control of Generation of Code
A vulnerability was detected in letta-ai letta 0.16.4. This issue affects the function resolve_type of the file letta/functions/ast_parsers.py of the component Incomplete Fix CVE-2025-6101. Performing a manipulation results in improper neutralization of direct