CVE-2026-18990 | letta-ai LettaBot 0.2.0 API Status Route src/api/server.ts missing authentication (CNNVD-2026-78239009)

A vulnerability classified as critical was found in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. This vulnerability was named CVE-2026-18990. The attack may be performed from remote. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.