Evidence · DiggingBeagle record
Letta CVE-2026-77938 local sandbox analysis
- Source role
- primary disclosure
Evidence record
Claim-level citations (1)
- supportsLetta local tools inherit the server credential environment: The detailed CVE-2026-77938 analysis reports that LocalSandbox copies the server environment into user-supplied tool subprocesses, exposing database and configured model-provider credentials.
Affected Files, Root Cause, PoC and Impact; tool_sandbox/base.py and local_sandbox.py