CVE-2026-77936

Versions of Letta through 0.16.8 are vulnerable to an insecure default configuration due to a compose.yaml file that fails to enable LETTA_SERVER_SECURE . This omission prevents the password middleware from being added, leaving all API routes unauthenticated . Additionally, the configuration expo...