HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-18990 — A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown ...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Analysis

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSS Score: 7.3. Published: 2026-08-06T03:16:20.930.

Indicators of Compromise (1)

CVE (1)
CVE-2026-18990
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 6, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Nayax and Zaria file for bank charters

Israeli payments and loyalty platform Nayax and infrastructure provider for mark-to-market credit and structured finance Zaria Systems are the latest fintechs to file applications in the US to charter banks.

Finextra
MEDIUMVulnerabilityNEW

Snowflake Hacker Pleads Guilty in US Court

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. The post Snowflake Hacker Pleads Guilty in US Court appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerabilityNEW

Monzo tops one million business accounts

Monzo has become the first British digital bank to surpass one million business customers.

Finextra