CVE-2026-77936: Initialization of a Resource with an Insecure Default in letta-ai letta

The vulnerability in letta-ai letta (<=0.16.8) arises from an insecure default configuration in the compose.yaml file that fails to enable LETTA_SERVER_SECURE. This leads to the absence of password middleware, allowing unauthenticated access to all API routes. Additionally, a superuser PostgreSQL port is exposed with default credentials. Attackers can exploit this to execute arbitrary Python code through the POST /v1/tools/run endpoint, manage users via /v1/admin, or execute OS commands using COPY PROGRAM functionality.

Remote attackers can gain unauthorized access to all API routes without authentication, execute arbitrary Python code, manage administrative users, and run operating system commands. This results in full compromise of the affected system, posing a critical security risk.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should manually enable LETTA_SERVER_SECURE in the compose.yaml configuration to ensure password middleware is active and change default PostgreSQL credentials to secure values.