critical · CVSS v3 9.8 · CVSS v4 9.3 · EPSS 0.0047

CVE-2026-77936

Letta 0.16.8 ships a compose.yaml that omits the LETTA_SERVER_SECURE flag, leaving all API routes unauthenticated and exposing a PostgreSQL

Overview

Letta 0.16.8 ships a compose.yaml that omits the LETTA_SERVER_SECURE flag, leaving all API routes unauthenticated and exposing a PostgreSQL superuser port with default credentials. This flaw allows remote attackers to execute arbitrary Python code, manage admin users, and run OS commands via the COPY PROGRAM endpoint. The vulnerability is critical, with a CVSS v3 score of 9.8 and an EPSS of 0.0047.

Description

Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST /v1/tools/run, manage /v1/admin users, or run OS commands via COPY PROGRAM.

Impact

The flaw compromises confidentiality, integrity, and availability of the Letta service and its underlying database. Unauthenticated attackers can gain full control of the system, alter data, and exfiltrate sensitive information, impacting all organizations running the vulnerable version.

Remediation

Apply the official patch that enables LETTA_SERVER_SECURE in compose.yaml, or manually set the flag to true. Change the PostgreSQL superuser password from the default, restrict the database port to trusted hosts, and enforce network segmentation. Additionally, disable the /v1/tools/run and COPY PROGRAM endpoints if not required, and monitor for anomalous API activity.

Risk context

The vulnerability is rated critical with a CVSS v3 score of 9.8 and a low EPSS of 0.0047, indicating a high severity but relatively low likelihood of exploitation. Defenders should prioritize patching and hardening immediately to mitigate potential remote code execution.

Affected products

  • Letta 0.16.8
  • Letta Compose
  • PostgreSQL

Scores

Severity
critical
CVSS v2
10
CVSS v3
9.8
CVSS v4
9.3
EPSS
0.0047

authentication-bypass unauthenticated-API default-credentials remote-code-execution postgreSQL critical CVE-2026-77936

← All CVEs

Related CVEs

critical

CVE-2026-113390

A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Interface. This manipulation of the argument usefile/usescript/option causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.

View analysis

critical

CVE-2026-107400

IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 contain a critical vulnerability allowing remote authenticated attackers to execute arbitrary code. The flaw stems from improper authentication mechanisms within the platform. This issue poses a significant risk to organizations relying on TRIRIGA for enterprise asset management.

View analysis

critical

CVE-2026-105298

Pingora versions prior to 0.9.0 contain a vulnerability where HTTP/2 requests with mismatched Host and :authority headers are processed inconsistently between request filters and upstream forwarding. This discrepancy allows for cache poisoning and host-based access control bypass in deployments that rely on the request authority for security or caching decisions.

View analysis

critical

CVE-2026-109395

Ning compress-lzf versions prior to 1.2.0 contain an out-of-bounds memory access vulnerability in the UnsafeChunkDecoder. This flaw allows crafted LZF streams to leak JVM heap memory or cause a denial of service by crashing the JVM.

View analysis