CVE-2025-6101
Published
CVSS v3
5.5
MEDIUM
CVSS v2
5.2
MEDIUM
Affected
1
PROJECT
Description
A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_message of the file letta/letta/interface.py. The manipulation of the argument function_name/function_args leads to improper neutralization of directives in dynamically evaluated code. The exploit has been disclosed to the public and may be used.
Letta is the platform for building stateful agents: AI with advanced memory that can learn and self-improve over time.