CVE-2026-77938
Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance
- State
- Published
- Severity
- 7.1 High
- Published
- Oct 20, 2026
- Updated
- Oct 20, 2026
- Reserved
- Aug 21, 2026
Description
Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys, then access cross-tenant database data.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable
Affected Products
| Product | Versions |
|---|---|
lettaletta-ai |
|
References
- Lasso.security Advisorytechnical-descriptionexploit
- https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/services/tool_sandbox/base.py#L487technical-description
- VulnCheck Advisory: Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritancethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.