Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-6101

letta-ai letta interface.py function_message eval injection

Description

A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_message of the file letta/letta/interface.py. The manipulation of the argument function_name/function_args leads to improper neutralization of directives in dynamically evaluated code. The exploit has been disclosed to the public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

letta-ai letta

  • 0.4.0affected
  • 0.4.1affected

References