Vulnerability · Published Mar 27, 2026 · Assigned by VulDB

CVE-2026-4965letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection

High 7.3

In plain English

A high-severity code injection in letta from letta-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.6%top 49.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in letta-ai letta 0.16.4. This issue affects the function resolve_type of the file letta/functions/ast_parsers.py of the component Incomplete Fix CVE-2025-6101. Performing a manipulation results in improper neutralization of directives in dynamically evaluated code. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
letta-ai	letta	0.16.4

Weakness: CWE-95, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-353842 | letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection vdb-entry, technical-description
VDB-353842 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #777654 | letta-ai letta 0.16.4 CWE-95 third-party-advisory
https://gist.github.com/YLChen-007/fc09bc447a73bba526c1642d9ce73ca5 exploit