9.8Kritik
CVE-2026-77936Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
Açıklama
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST /v1/tools/run, manage /v1/admin users, or run OS commands via COPY PROGRAM.
Zayıflık türü (CWE):
CWE-1188
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- Lasso.security Advisory technical-descriptionexploit
- https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/compose.yaml#L17 technical-description
- https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/server/rest_api/app.py#L799 technical-description
- VulnCheck Advisory: Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access third-party-advisory