---
id: CVE-2026-77938
title: >-
  Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment
  Inheritance
summary: >-
  Letta through 0.16.8 contains an information disclosure vulnerability that
  allows users running tools to read server secrets because LocalSandbox
  subprocesses inherit the full server environment. Attackers can run code via
  POST /v1/tools…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-526
vendor: letta-ai
product: letta
affected:
  - letta <= 0.16.8
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T00:46:15.564Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-77938'
references:
  - url: 'https://www.lasso.security/vulnerability-database/cve-2026-77938'
    label: Lasso.security Advisory
  - url: >-
      https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/services/tool_sandbox/base.py#L487
  - url: >-
      https://www.vulncheck.com/advisories/letta-through-0.16.8-credential-exposure-via-tool-sandbox-environment-inheritance
    label: >-
      VulnCheck Advisory: Letta through 0.16.8 Credential Exposure via Tool
      Sandbox Environment Inheritance
tags:
  - cve.org
ingestedAt: '2026-10-20T01:49:42.623Z'
---

## Overview

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys, then access cross-tenant database data.

## Affected

- `letta <= 0.16.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.