Letta <=0.16.8 LocalSandbox env leak via tools/run
CVE-2026-77938 Published on October 20, 2026
Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance
Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys, then access cross-tenant database data.
Vulnerability Analysis
CVE-2026-77938 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Exposure of Sensitive Information Through Environmental Variables
Environmental variables may contain sensitive information about a remote server.
Products Associated with CVE-2026-77938
Want to know whenever a new CVE is published for Letta? stack.watch will email you.
Affected Versions
letta-ai letta:- Before and including 0.16.8 is affected.