{"id":"CVE-2026-77938","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-77938","generatedAt":"2026-10-28T02:57:01.304Z","title":"Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment.","description":"Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys, then access cross-tenant database data.","published":"2026-10-20T01:17:20.000Z","lastModified":"2026-10-20T20:11:30.000Z","status":"Deferred","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":7.1,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-526"],"affected":[],"epss":{"score":0.00416,"percentile":0.35669,"date":"2026-10-26","history":[{"date":"2026-10-20","score":0.00341,"percentile":0.26129}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.42%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-20T01:17:20.000Z","detail":{"score":"7.1","severity":"HIGH","publishedAt":"2026-10-20T01:17:20.410Z"},"summary":"New CVE, high severity (CVSS 7.1)."}],"references":[{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/services/tool_sandbox/base.py#L487","source":"disclosure@vulncheck.com"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77938","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/letta-through-0.16.8-credential-exposure-via-tool-sandbox-environment-inheritance","source":"disclosure@vulncheck.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-77938","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}