Vendor
LettaBot version 0.2.0 contains a missing authentication vulnerability in its API Status Route, enabling remote unauthenticated access to system functions.