CVE-2026-77938

Letta versions through 0.16.8 are vulnerable to an information disclosure vulnerability due to LocalSandbox subprocesses inheriting the full server environment. An attacker can execute code via POST /v1/tools/run or custom tools to extract sensitive secrets, including LETTA_PG_URI , POSTGRES_PASS...

CVE-2026-77938 Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTAPGURI, POSTGRESPASSWORD, a...