CVE-2026-77936 | letta-ai Letta up to 0.16.8 Password Middleware compose.yaml os command injection

October 20, 2026 Yanac

A vulnerability classified as critical has been found in letta-ai Letta up to 0.16.8. Impacted is an unknown function of the file compose.yaml of the component Password Middleware. The manipulation leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is listed as CVE-2026-77936. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More