CVE-2024-39025

Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data...

CVE-2024-39025

creationtimestamp| type| source ---|---|--- 2024-12-27 20:02:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113726571815938570 2024-12-27 20:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecskcfuut2m 2024-12-27 21:52:45+00:00| seen|...

CVE-2024-39025

Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data...

CVE-2024-39025

CVE-2024-39025 affects Letta/MemGPT v0.3.17 (Cpacker MemGPT) and is caused by incorrect access control in the "/users" endpoint. Multiple sources (Red Hat, NVD, OSV, GHSA, Veracode, CIRCL, CNNVD, Snyk) describe that missing authorization in the get_all_users() flow can expose sensitive data. Cond...

CVE-2024-39025

Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data...