high · CVSS v3 6.5 · CVSS v4 7.1 · EPSS 0.00341

CVE-2026-77938

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server sec…

Description

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys, then access cross-tenant database data.

Scores

Severity
high
CVSS v2
6.8
CVSS v3
6.5
CVSS v4
7.1
EPSS
0.00341

← All CVEs

Related CVEs

high

CVE-2026-105453

IBM Sterling Connect Direct for Unix contains a vulnerability in privilege management that allows local attackers to escalate their access. This flaw affects versions 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6. It is critical for environments where this file transfer solution is deployed with local user access.

View analysis

high

CVE-2026-107366

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain an authorization flaw in message endpoints that allows any authenticated user to manipulate other users' data. This vulnerability enables bulk deletion, content overwriting, and session hijacking without proper ownership verification.

View analysis

high

CVE-2026-109126

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 appliances contain hard‑coded credentials that can be used by a physically proximate attacker to gain elevated privileges. This flaw allows local attackers to bypass authentication and potentially take full control of the appliance. The vulnerability is rated high severity with a CVSS v3 score of 8.8.

View analysis

high

CVE-2026-112373

H3C Magic NX15 devices running version NX15V100R017 contain a stack-based buffer overflow vulnerability in the /usr/bin/usrlist binary. This flaw allows for remote exploitation, posing a significant risk to network infrastructure integrity. The vulnerability has been publicly disclosed, increasing the likelihood of active scanning and exploitation attempts.

View analysis