Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/06 3:16 a.m.•23 views

CVE-2026-18990

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...

7.5CVSS0.00686EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/06 2:15 a.m.•24 views

EUVD-2026-53700

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...

7.5CVSS6.9AI score0.00686EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/06 2:15 a.m.•16 views

CVE-2026-18990 letta-ai LettaBot API Status Route server.ts missing authentication

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...

7.5CVSS6.9AI score0.00686EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/06 2:15 a.m.•51 views

CVE-2026-18990 letta-ai LettaBot API Status Route server.ts missing authentication

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...

7.5CVSS0.00686EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/06 2:15 a.m.•83 views

CVE-2026-18990

CVE-2026-18990 affects letta-ai LettaBot 0.2.0. The issue concerns an unexplained vulnerability in the file src/api/server.ts of the API Status Route, resulting in missing authentication. Exploitation can be performed remotely, and public exploit code exists. Vendor was contacted but did not resp...

7.5CVSS6.9AI score0.00686EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•4 views

CVE-2026-18990: Missing Authentication for Critical Function

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...

7.5CVSS6.9AI score0.00686EPSS
SaveExploits0References3
Rows per page
Query Builder