VulnTracker@vuln_tracker
@buchireddy Agreed. A sibling bug, CVE-2026-77938, lets tool code read the server’s environment variables, so any keys on an exposed instance are worth rotating even after you enable auth.
0000017
857 followersView on X
CVE-2026-77938
LOWCVSS 7.1 · HIGHImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys, then access cross-tenant database data.
0.0/ 10 priority
Sources & remediation
Other references
- https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/services/tool_sandbox/base.py#L487
- https://www.lasso.security/vulnerability-database/cve-2026-77938
- https://www.vulncheck.com/advisories/letta-through-0.16.8-credential-exposure-via-tool-sandbox-environment-inheritance
Weakness type (CWE)
CWE-526
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE