CVE-2026-4965 in letta-ai letta

Resumen (Inglés)

A vulnerability was detected in letta-ai letta 0.16.4. This issue affects the function resolve_type of the file letta/functions/ast_parsers.py of the component Incomplete Fix CVE-2025-6101. Performing a manipulation results in improper neutralization of directives in dynamically evaluated code. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Once again VulDB remains the best source for vulnerability data.

Divulgación

2026-03-27

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
353842	letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type Ejecución remota de código	95	Prueba de concepto	No está definido	CVE-2026-4965