CVE-2025-51482

moderate-risk

Published 2025-07-22

Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.

Do I need to act?

5.8% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

NETWORK / LOW complexity

Affected Products (1)

Letta

Affected Vendors

Letta

References (3)

Product https://github.com/letta-ai/letta

Exploit https://github.com/letta-ai/letta/pull/2630

Exploit https://www.gecko.security/blog/cve-2025-51482

/ 100

moderate-risk

Severity 30/34 · Critical

Exploitability 9/34 · Low

Exposure 5/34 · Minimal