Entity · DiggingBeagle record
Letta
Letta provides stateful AI agents with tools and persistent memory. Its self-hosted service is the subject of three distinct authorization and execution-environment advisories. The three advisories apply at different boundaries: self-hosted defaults leave admin and tool routes unauthenticated if the secure switch is unset; secure mode's shared password still does not bind a client-selected user_id to a tenant; and the local tool backend inherits database and model keys from the server environment. The controlled proofs do not establish live compromised tenants, and mitigations for one route do not automatically resolve the other two. [Default auth](db:CASE-2026-RADAR-LETTA-DEFAULT-AUTH), [tenant header](db:CASE-2026-RADAR-LETTA-TENANT-HEADER), [tool environment](db:CASE-2026-RADAR-LETTA-TOOL-ENVIRONMENT).
Record description
Letta provides stateful AI agents with tools and persistent memory. Its self-hosted service is the subject of three distinct authorization and execution-environment advisories.
The three advisories apply at different boundaries: self-hosted defaults leave admin and tool routes unauthenticated if the secure switch is unset; secure mode's shared password still does not bind a client-selected user_id to a tenant; and the local tool backend inherits database and model keys from the server environment. The controlled proofs do not establish live compromised tenants, and mitigations for one route do not automatically resolve the other two. Default auth, tenant header, tool environment.