<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: letta</title><description>Every new CVE for letta.</description><link>https://agentprime.io/</link><item><title>CVE-2026-77938: Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance</title><link>https://agentprime.io/advisories/CVE-2026-77938/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77938/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 00:46:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77937: Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header</title><link>https://agentprime.io/advisories/CVE-2026-77937/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77937/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 00:46:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77936: Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access</title><link>https://agentprime.io/advisories/CVE-2026-77936/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77936/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 00:46:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-4965: letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection</title><link>https://agentprime.io/advisories/CVE-2026-4965/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4965/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 17:41:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-4964: letta-ai letta File URL message_helper.py _convert_message_create_to_message server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-4964/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4964/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 17:05:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-6101: letta-ai letta interface.py function_message eval injection</title><link>https://agentprime.io/advisories/CVE-2025-6101/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-6101/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Jun 2025 02:00:11 GMT</pubDate><category>CVE</category></item></channel></rss>