{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3alettaletta/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:letta:letta:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-77936"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Letta (\u003c= 0.16.8)"],"_cs_severities":["critical"],"_cs_tags":["configuration-error","remote-code-execution","web-application","authentication-bypass","cloud","webserver"],"_cs_type":"advisory","_cs_vendors":["Letta"],"content_html":"\u003cp\u003eLetta versions through 0.16.8 are affected by a critical configuration vulnerability stemming from a default docker-compose.yaml file. The provided configuration fails to enable the LETTA_SERVER_SECURE environment variable, which results in the underlying application failing to load its password middleware. Consequently, the entire API surface becomes unauthenticated. Furthermore, the default deployment exposes an internal PostgreSQL database instance that utilizes default credentials. This vulnerability allows remote, unauthenticated attackers to interact with the API, execute arbitrary Python code, manage administrative users, and leverage database features such as COPY PROGRAM to execute arbitrary OS-level commands. Given the ease of exploitation, this poses a severe risk to any environment running a default Letta container deployment.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker performs network discovery to identify exposed Letta API ports (default 8283) or PostgreSQL instances (default 5432).\u003c/li\u003e\n\u003cli\u003eAttacker probes the /v1/admin or /v1/tools/run endpoints to confirm the lack of authentication.\u003c/li\u003e\n\u003cli\u003eAttacker accesses the API anonymously to gain insights into the application state or user list.\u003c/li\u003e\n\u003cli\u003eAttacker uses default credentials to gain unauthorized access to the exposed PostgreSQL database instance.\u003c/li\u003e\n\u003cli\u003eAttacker leverages database privileges to perform administrative actions, such as creating or modifying Letta platform users.\u003c/li\u003e\n\u003cli\u003eAttacker sends a POST request to /v1/tools/run containing malicious Python code to achieve remote code execution.\u003c/li\u003e\n\u003cli\u003eAttacker optionally uses PostgreSQL COPY PROGRAM functions to escalate to underlying OS command execution.\u003c/li\u003e\n\u003cli\u003eAttacker achieves persistent access or exfiltrates data from the host environment.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote attackers to bypass all authentication controls, leading to total compromise of the Letta instance. Attackers can execute arbitrary code on the application host, gain full administrative control over the platform, and potentially compromise the underlying infrastructure through database-level command execution. This vulnerability is applicable to any enterprise or individual using Letta in a default containerized deployment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately upgrade Letta to a version later than 0.16.8 where the compose.yaml has been remediated.\u003c/li\u003e\n\u003cli\u003eUpdate existing container deployments to explicitly set LETTA_SERVER_SECURE to 'true' in all environment configurations.\u003c/li\u003e\n\u003cli\u003eRotate default credentials for any PostgreSQL database instances managed by Letta deployments.\u003c/li\u003e\n\u003cli\u003eRestrict network access to the Letta API and the PostgreSQL service to trusted internal IP addresses only.\u003c/li\u003e\n\u003cli\u003eAudit logs for unauthorized access to the /v1/admin and /v1/tools/run endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T02:32:29Z","date_published":"2026-10-20T02:31:43Z","id":"https://feed.craftedsignal.io/briefs/2026-10-letta-insecure-config/","summary":"Letta versions through 0.16.8 ship with a insecure compose.yaml that disables authentication middleware and exposes a PostgreSQL database with default credentials, enabling remote code execution and administrative account takeover.","title":"Insecure Default Configuration in Letta Leading to Unauthenticated RCE","url":"https://feed.craftedsignal.io/briefs/2026-10-letta-insecure-config/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:letta:letta:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}