PT-2026-117954

Name of the Vulnerable Software and Affected Versions Letta versions prior to 0.16.9 Description The default self-hosted setup includes a compose.yaml file that fails to enable LETTA SERVER SECURE, resulting in the omission of password middleware and leaving all API routes unauthenticated. This...