{"advisories":[{"id":"EUVD-2025-22345","source":"euvd","title":"Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22345"}],"cve":"CVE-2025-51482","epss":{"score":0.01876},"mitre":{"cpes":[],"created":"2025-07-22T00:00:00+00:00","description":"Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2025/51xxx/CVE-2025-51482.json","references":["https://github.com/letta-ai/letta","https://github.com/letta-ai/letta/pull/2630","https://www.gecko.security/blog/cve-2025-51482"],"title":null,"updated":"2025-07-22T17:54:13.905000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:letta:letta:0.7.12:*:*:*:*:*:*:*"],"created":"2025-07-22T17:15:33.750000+00:00","description":"Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2025/CVE-2025-51482.json","references":["https://github.com/letta-ai/letta","https://github.com/letta-ai/letta/pull/2630","https://www.gecko.security/blog/cve-2025-51482"],"title":null,"updated":"2026-06-17T09:35:37.930000+00:00","vendors":["letta","letta$PRODUCT$letta"],"weaknesses":["CWE-94"]},"opencve":{"changes":[{"created":"2025-07-22T17:00:00+00:00","data":[{"details":{"new":"Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.","old":null},"type":"description"},{"details":{"added":["https://github.com/letta-ai/letta","https://github.com/letta-ai/letta/pull/2630","https://www.gecko.security/blog/cve-2025-51482"],"removed":[]},"type":"references"}],"id":"7120f6e0-adfd-4bf8-b57f-e8df8b012429"},{"created":"2025-07-22T18:15:00+00:00","data":[{"details":{"added":["CWE-94"],"removed":[]},"type":"weaknesses"},{"details":{"added":{"cvssV3_1":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"ssvc":{"options":{"Automatable":"no","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"16ad207e-399c-4e16-af72-0c19d588a86d"},{"created":"2025-10-07T20:45:00+00:00","data":[{"details":["letta","letta$PRODUCT$letta"],"type":"first_time"},{"details":{"added":["cpe:2.3:a:letta:letta:0.7.12:*:*:*:*:*:*:*"],"removed":[]},"type":"cpes"},{"details":{"added":["letta","letta$PRODUCT$letta"],"removed":[]},"type":"vendors"}],"id":"0822409f-ab7b-4ffc-ab3c-95af2f050f99"}],"cpes":{"data":["cpe:2.3:a:letta:letta:0.7.12:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2025-07-22T00:00:00+00:00","provider":"mitre"},"description":{"data":"Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"provider":"vulnrichment"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.01876},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://github.com/letta-ai/letta","https://github.com/letta-ai/letta/pull/2630","https://www.gecko.security/blog/cve-2025-51482"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-10-07T20:33:35.650000+00:00","provider":"nvd"},"vendors":{"data":["letta","letta$PRODUCT$letta"],"providers":["nvd"]},"weaknesses":{"data":["CWE-94"],"providers":["nvd","vulnrichment"]}},"vulnrichment":{"cpes":[],"created":"2025-07-22T00:00:00+00:00","description":"Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"}},"references":[],"title":null,"updated":"2025-07-22T17:52:47.184000+00:00","vendors":[],"vulnrichment_repo_path":"2025/51xxx/CVE-2025-51482.json","weaknesses":["CWE-94"]}}