Exploit Details
Basic Information
| Exploit Title |
Exploit for CVE-2025-51482 |
| Exploit ID |
428473AF-B243-54CA-A256-27EC87AD54B5 |
| Type |
githubexploit |
| Published |
2025-07-31T08:07:59 |
| Modified |
2025-07-31T08:43:46 |
CVSS Information
| CVSS Score |
8.8 |
| Severity |
HIGH |
| Vector |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
AI Analysis
| AI Description |
A remote code execution (RCE) vulnerability in Letta allows attackers to execute arbitrary code due to insufficient security checks. This can lead to system compromise and data breaches. |
| AI Severity |
Critical |
| AI Vendor |
Letta Community |
| AI Product |
Letta |
CVE Information
Exploit Description
Letta-CVE-2025-51482-RCE 漏洞原因分析 1. 缺乏代码安全检查 问题: 系统没有对用户提供的源代码进行任何安全检查。 证据: generate_execution_script 方法直接将用户代码插入到执行脚本中： python code += "\n" + self.tool.source_code + "\n" 没有AST分析来检测危险操作（如os.system、subprocess.call、eval等） …
View Full Exploit Details
