CVE-2026-77936 - Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
CVE ID :CVE-2026-77936 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL...