letta-ai letta interface.py function_message eval injection
Vulnerability Description
A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_message of the file letta/letta/interface.py. The manipulation of the argument function_name/function_args leads to improper neutralization of directives in dynamically evaluated code. The exploit has been disclosed to the public and may be used.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6101
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- ybdesire (VulDB User)
Affected Vendor
letta-ai
View all reports →