漏洞介绍：

Letta（原名 MemGPT）是一个开源框架，旨在构建具备长期记忆、上下文管理和高级推理能力的 AI Agent，也支持将这些 Agent 以微服务形式部署为 REST API 服务，可被集成到应用中使用。它提供状态持久化、工具调用、上下文可视化等功能，适用于对话型 AI、自动化流程与记忆驱动应用的场景。

漏洞出现在 Letta 服务端的 run_tool_from_source 接口中，该接口会直接执行用户提交的 Python 源码，原本应通过本地沙箱机制（local sandbox）来限制危险操作，但实际实现存在缺陷，导致攻击者可绕过限制并在宿主环境中执行任意代码。

漏洞影响：

该接口是 Letta 中提供“工具执行”能力的开放端点，设计用于在 AI Agent 中运行自定义脚本工具。

全球分布图：

漏洞编号：CVE-2025-51482

漏洞等级：高危

受影响版本：已知影响 Letta 0.7.12 版本

漏洞类型：远程代码执行

利用流程：

漏洞复现：

在本地或测试服务器部署 Letta 后，攻击者可直接向 /v1/tools/run 接口发起 POST 请求，并在 source_code 字段中传入自定义 Python 代码。该接口原本用于在 AI Agent 中运行自定义工具，但由于缺乏有效的执行隔离，传入的代码会被 Letta 后端直接调用 Python 解释器执行。利用此缺陷，攻击者可构造包含系统命令（如 id、ls 等）的 payload 并发送至目标接口，从而在服务器上执行任意代码并回显结果，实现对主机的完全控制。整个过程无需身份认证或可在弱权限下触发，对存在公网暴露接口的实例威胁极大。

漏洞验证:

利用 pocx 向目标的/v1/tools/run 接口发送包含模板注入代码的 POST 请求，若响应中回显预期命令执行结果（如 uid=、root、 等），即判断目标存在远程代码执行风险。

和中科技修复建议：

1、限制或屏蔽对 /v1/tools/run 接口的访问，启用严格身份认证和访问控制。

2、尽快升级 Letta 到官方包含漏洞修复的版本，或合并官方补丁自行构建。

3、启用 RESTRICTEDPYTHON_LOCAL_ENABLED=true，使用 RestrictedPython 沙箱和白名单机制限制代码执行权限。

4、降低 Letta 服务运行权限，避免 root 用户运行，并结合容器限制资源和网络权限。

http://1xU3y.zhuandiandian.com/

http://NOKni.buxuxiao.com/

http://zABHx.zzmsmc.com/

http://PRr2i.buxuxiao.com/

http://B7im2.zzmsmc.com/

http://QU8HN.hbhrcs.com/

http://CaZ1y.hbhrcs.com/

http://oXPmi.zhuandiandian.com/

http://EdcGx.diandaxuexi.com/

http://qu20i.zhuandiandian.com/

http://cgTl3.diandaxuexi.com/

http://rxJbN.buxuxiao.com/

http://dNAwy.buxuxiao.com/

http://ZAqQj.zzmsmc.com/

http://fQhb3.hbhrcs.com/

http://1D7vi.zzmsmc.com/

http://NTYP3.hbhrcs.com/

http://2alaO.zzmsmc.com/

http://OWbuy.zhuandiandian.com/

http://4d2Pj.diandaxuexi.com/

http://QZS94.zhuandiandian.com/

http://CgJui.diandaxuexi.com/

http://SwzO3.buxuxiao.com/

http://Djq8O.diandaxuexi.com/

http://pzgtz.zzmsmc.com/

http://Fm7jj.hbhrcs.com/

http://rCXE4.zzmsmc.com/

http://dTkYj.hbhrcs.com/

http://tFaj3.zhuandiandian.com/

http://eW1DO.hbhrcs.com/

http://0IRXz.diandaxuexi.com/

http://gZIik.zhuandiandian.com/

http://2fyC4.diandaxuexi.com/

http://i2pXP.buxuxiao.com/

http://4ifh4.diandaxuexi.com/

http://P56CO.buxuxiao.com/

http://5lsWz.hbhrcs.com/

http://RCjgk.zzmsmc.com/

http://Doa75.hbhrcs.com/

http://TF0rP.zhuandiandian.com/

http://FVRM4.hbhrcs.com/

http://qIH6P.zhuandiandian.com/

http://GYyrz.buxuxiao.com/

http://sLoLk.diandaxuexi.com/

http://e1f55.buxuxiao.com/

http://ui5qQ.diandaxuexi.com/

http://g4sKA.buxuxiao.com/

http://wli5P.zzmsmc.com/

http://h79pA.zzmsmc.com/

http://3oZKk.hbhrcs.com/

http://jEQ45.zhuandiandian.com/

http://5rGUQ.hbhrcs.com/

http://RHxfA.zhuandiandian.com/

http://7unzP.diandaxuexi.com/

http://SKeUA.zhuandiandian.com/

http://E1Ael.buxuxiao.com/

http://UNrz5.zzmsmc.com/

http://G4hTQ.buxuxiao.com/

http://sQ8dB.zzmsmc.com/

http://I6YyP.buxuxiao.com/

http://tnPSA.zzmsmc.com/

http://J9Gdl.zhuandiandian.com/

http://vqwx6.hbhrcs.com/

http://hcnSQ.zhuandiandian.com/

http://xtJcB.diandaxuexi.com/

http://jJA2m.zhuandiandian.com/

http://4wqnA.diandaxuexi.com/

http://kMhHl.zzmsmc.com/

http://63726.buxuxiao.com/

http://SPYmR.zzmsmc.com/

http://86OHB.hbhrcs.com/

http://USF1m.zzmsmc.com/

http://F9vlB.hbhrcs.com/

http://VpmGl.hbhrcs.com/

http://HcI06.zhuandiandian.com/

http://XszlR.diandaxuexi.com/

http://JfpFC.zhuandiandian.com/

http://vvg0m.diandaxuexi.com/

http://KM6Q7.buxuxiao.com/

http://wyXam.buxuxiao.com/

http://iPNv6.zzmsmc.com/

http://yBEPR.hbhrcs.com/

http://kSvaC.zzmsmc.com/

http://68Run.hbhrcs.com/

http://lVIP7.zhuandiandian.com/

http://7by9m.zhuandiandian.com/

http://TYpt7.diandaxuexi.com/

http://9efOR.zhuandiandian.com/

http://Vv68C.diandaxuexi.com/

http://bhWtn.buxuxiao.com/

http://WyNN7.diandaxuexi.com/

http://IkDEm.zzmsmc.com/

http://YBuY7.hbhrcs.com/

http://KRQiS.zzmsmc.com/

http://wEHDC.hbhrcs.com/

http://MUxXn.zhuandiandian.com/

http://xboi8.hbhrcs.com/

http://jXeCS.diandaxuexi.com/

http://ze5X7.buxuxiao.com/

http://l0VhS.diandaxuexi.com/

http://7hMCD.buxuxiao.com/

http://nxCWn.diandaxuexi.com/

http://8kZg8.buxuxiao.com/

http://oAQBT.hbhrcs.com/

http://anGr7.zzmsmc.com/

http://WDxMS.hbhrcs.com/

http://cUn6D.zhuandiandian.com/

http://YGero.hbhrcs.com/

http://JX4L8.zhuandiandian.com/

http://ZJV5T.buxuxiao.com/

http://L0Lq8.diandaxuexi.com/

http://xgCKS.buxuxiao.com/

http://N3Y5D.zzmsmc.com/

http://zjPpo.buxuxiao.com/

http://l6FK9.zzmsmc.com/

http://Amw4T.buxuxiao.com/

http://mDmoE.hbhrcs.com/

http://CpdJT.zhuandiandian.com/

http://oG3zD.hbhrcs.com/

http://asUUo.zhuandiandian.com/

http://qJKe9.diandaxuexi.com/

http://bZ7zU.zhuandiandian.com/

http://XLXTE.buxuxiao.com/

http://d2OdT.zzmsmc.com/

http://ZiFyE.buxuxiao.com/

http://L5vSo.zzmsmc.com/

http://1lmd9.hbhrcs.com/

http://M8cxU.zzmsmc.com/

http://yo3SF.zhuandiandian.com/

http://OFTcp.hbhrcs.com/

http://ArgwE.zhuandiandian.com/

http://QI6np.diandaxuexi.com/

http://CuXH9.zhuandiandian.com/

http://nLN2U.diandaxuexi.com/

http://D1EmF.zzmsmc.com/

http://pOuHp.buxuxiao.com/

http://b4l1E.zzmsmc.com/

http://rRblp.hbhrcs.com/

http://d72Ga.zzmsmc.com/

http://YoS0U.hbhrcs.com/

http://eaflF.diandaxuexi.com/

http://0r5Fq.zhuandiandian.com/

http://MdW0E.diandaxuexi.com/

http://2uMkp.zhuandiandian.com/

http://OKDaa.diandaxuexi.com/

http://3xuvV.buxuxiao.com/

http://PNkPF.buxuxiao.com/

http://BAbaq.zzmsmc.com/

http://RQ1ub.hbhrcs.com/

http://D7oPp.zzmsmc.com/

http://pTe9a.hbhrcs.com/

http://Ea5tV.zhuandiandian.com/

http://qqVOG.zhuandiandian.com/

http://cdM8q.diandaxuexi.com/

http://stCtb.buxuxiao.com/

http://egtNq.diandaxuexi.com/

http://0wj8a.buxuxiao.com/

http://fNasV.diandaxuexi.com/

http://1z0iG.zzmsmc.com/

http://hQnDr.hbhrcs.com/

http://3CdXb.zzmsmc.com/

http://PT4iW.hbhrcs.com/

http://59UCb.zhuandiandian.com/

http://QWLXV.hbhrcs.com/

http://CcBhG.diandaxuexi.com/

http://SZsBr.buxuxiao.com/

http://EfjWc.diandaxuexi.com/

http://qw9gW.buxuxiao.com/

http://GiwBb.zzmsmc.com/

http://rzmVW.buxuxiao.com/

http://dldgG.hbhrcs.com/

http://tC36r.zzmsmc.com/

http://fSUqc.hbhrcs.com/

http://vFKLX.zhuandiandian.com/

http://hVB5b.hbhrcs.com/

http://3IrqW.zhuandiandian.com/

http://iYiKH.buxuxiao.com/

http://4fE5r.diandaxuexi.com/

http://Q1vpc.buxuxiao.com/

http://6ilJX.zzmsmc.com/

http://S4c4H.buxuxiao.com/

http://El2oW.zzmsmc.com/

http://TBTJH.hbhrcs.com/

http://FoJ3s.hbhrcs.com/

http://rEAUc.zhuandiandian.com/

http://HVqeX.hbhrcs.com/

http://tHhyI.zhuandiandian.com/

http://JXDTW.diandaxuexi.com/

http://uKudH.zhuandiandian.com/

http://g0lys.buxuxiao.com/

http://whbSd.zzmsmc.com/

http://i32dX.buxuxiao.com/

http://4kSxI.zzmsmc.com/

http://k6JRX.hbhrcs.com/

http://5nzcH.zzmsmc.com/

http://RDqws.zhuandiandian.com/

http://7qMRd.diandaxuexi.com/

http://TGDbY.zhuandiandian.com/

http://Ftt2I.diandaxuexi.com/

http://VJkmt.zhuandiandian.com/

http://G0aGI.diandaxuexi.com/

http://WM11s.zzmsmc.com/

http://I3Rld.buxuxiao.com/

http://uPIGY.zzmsmc.com/

http://K6y0J.hbhrcs.com/

http://wmplt.zzmsmc.com/

http://h9LFI.hbhrcs.com/

http://xpCZt.diandaxuexi.com/

http://jcskd.zhuandiandian.com/

http://5sjEY.diandaxuexi.com/

http://lJaZJ.buxuxiao.com/

http://7v0Pu.diandaxuexi.com/

http://SMRae.buxuxiao.com/

http://82Hut.buxuxiao.com/

http://UPyOe.zzmsmc.com/

http://a5U9Y.hbhrcs.com/

http://WSLtJ.zzmsmc.com/

http://I8BOu.hbhrcs.com/

http://Xps8e.zhuandiandian.com/

http://Jbitt.zhuandiandian.com/

http://vs9Ne.diandaxuexi.com/

http://LeZ7Z.buxuxiao.com/

http://xvQsJ.diandaxuexi.com/

http://jLGMu.buxuxiao.com/

http://yy3Df.zzmsmc.com/

http://kOTXt.zzmsmc.com/

http://6BKie.hbhrcs.com/

http://mRACZ.zzmsmc.com/

http://88rXK.hbhrcs.com/

http://oUhhu.zhuandiandian.com/

http://9b8Bf.hbhrcs.com/

http://VXZW0.diandaxuexi.com/

http://bePge.buxuxiao.com/

http://XuGBZ.diandaxuexi.com/

http://Jh2VK.buxuxiao.com/

http://ZxTgv.zzmsmc.com/

http://KkJAf.buxuxiao.com/

http://wAAU0.hbhrcs.com/

http://MRqLf.zhuandiandian.com/

http://yDh5Z.hbhrcs.com/

http://kU7qK.zhuandiandian.com/

http://AaYKv.hbhrcs.com/

http://mXO5g.zhuandiandian.com/

http://Bdbp0.diandaxuexi.com/

http://n01JL.diandaxuexi.com/

http://9gS40.buxuxiao.com/

http://pxIoK.zzmsmc.com/

http://bjzJv.buxuxiao.com/

http://XAp3g.zzmsmc.com/

http://cmgo1.hbhrcs.com/

http://YC6IL.hbhrcs.com/

http://KTXy0.zhuandiandian.com/

http://0FOTL.diandaxuexi.com/

http://MWadv.zhuandiandian.com/

http://yI1yg.diandaxuexi.com/

http://NZRS1.zhuandiandian.com/

http://zfIdM.buxuxiao.com/

http://P2yx0.zzmsmc.com/

http://BipRL.buxuxiao.com/

http://n5fcw.zzmsmc.com/

http://Dl6wg.hbhrcs.com/

http://oCWR1.zzmsmc.com/

http://aojbM.zhuandiandian.com/

http://qF9ww.diandaxuexi.com/

http://cr0mL.zhuandiandian.com/

http://YIQGw.diandaxuexi.com/

http://eYH1h.buxuxiao.com/

http://ZLxl1.diandaxuexi.com/

http://L1oGM.zzmsmc.com/

http://1ie0x.buxuxiao.com/

http://N45lL.zzmsmc.com/

http://3lVFw.hbhrcs.com/

http://P7iZh.zzmsmc.com/

http://Ao9k2.hbhrcs.com/

http://QEZEM.diandaxuexi.com/

http://CrQZx.zhuandiandian.com/

http://oHGji.diandaxuexi.com/

http://EuxEw.buxuxiao.com/

http://qKnuh.diandaxuexi.com/

http://b1eO2.buxuxiao.com/

http://rN49N.hbhrcs.com/

http://d4rtx.zzmsmc.com/

http://ZQhOi.hbhrcs.com/

http://f788x.zzmsmc.com/

http://1nYth.hbhrcs.com/

http://gaPN2.zhuandiandian.com/

http://2qF7N.zhuandiandian.com/

http://Odwsy.diandaxuexi.com/

http://4tmMi.buxuxiao.com/

http://QKd7x.diandaxuexi.com/

http://Cwzri.buxuxiao.com/

http://RNqi2.zzmsmc.com/

http://DzgCN.zzmsmc.com/

http://pQ7Wy.hbhrcs.com/

http://F6Yhj.zhuandiandian.com/

http://rTOB3.hbhrcs.com/

http://d9FWi.zhuandiandian.com/

http://sqvg3.hbhrcs.com/

http://ecmBN.diandaxuexi.com/

http://utcVy.buxuxiao.com/

http://gfzfj.diandaxuexi.com/

http://2wpA4.buxuxiao.com/

http://iMgUi.zzmsmc.com/

http://nhRY8.buxuxiao.com/

http://lFtVp.diandaxuexi.com/

http://Bsjf9.diandaxuexi.com/

http://nIaAo.zhuandiandian.com/

http://9Z0U9.diandaxuexi.com/

http://pLRfT.buxuxiao.com/

http://b1HzE.diandaxuexi.com/

http://WOyTp.buxuxiao.com/

http://c4pea.hbhrcs.com/

http://Ylfyo.zzmsmc.com/

http://e7CT9.hbhrcs.com/

http://0osdU.zzmsmc.com/

http://MajyE.hbhrcs.com/

http://1r9Sp.zhuandiandian.com/

http://NH0ca.zhuandiandian.com/

http://zuQ3V.diandaxuexi.com/

http://PKHn9.buxuxiao.com/

http://B1xIU.diandaxuexi.com/

http://nNo2F.buxuxiao.com/

http://C4enp.zzmsmc.com/

http://oQBHa.zzmsmc.com/

http://a7r1V.hbhrcs.com/

http://qnima.zhuandiandian.com/

http://ca8GU.hbhrcs.com/

http://sqZ1F.zhuandiandian.com/

http://ddPlq.hbhrcs.com/

http://ZtGGa.diandaxuexi.com/

http://fKw0V.buxuxiao.com/

http://1wnQa.diandaxuexi.com/

http://NNKbU.buxuxiao.com/

http://3zAvF.zzmsmc.com/

http://OQrQq.buxuxiao.com/

http://A6hab.hbhrcs.com/

http://QT8vV.zhuandiandian.com/

http://C9YPG.hbhrcs.com/

http://oWP9V.zhuandiandian.com/

http://EcFuF.diandaxuexi.com/

http://ptwOq.zhuandiandian.com/

http://Ffm9b.buxuxiao.com/

http://rwJtW.diandaxuexi.com/

http://dizOG.buxuxiao.com/

http://tzqEV.zzmsmc.com/

http://fPgYG.buxuxiao.com/

http://0C7jq.zzmsmc.com/

http://gSXDb.zhuandiandian.com/

http://2FOYW.hbhrcs.com/

http://OVEiH.zhuandiandian.com/

http://4cvDV.diandaxuexi.com/

http://QYRXG.zhuandiandian.com/

http://BfIhr.diandaxuexi.com/

http://RvyCb.zzmsmc.com/

http://DipWW.buxuxiao.com/

http://TyghH.zzmsmc.com/

http://Fl6Bs.buxuxiao.com/

http://rBXWG.zzmsmc.com/

http://GSNMr.hbhrcs.com/

http://sEE6c.hbhrcs.com/

http://eV0rW.zhuandiandian.com/

http://uHRLH.diandaxuexi.com/

http://gYH6s.zhuandiandian.com/

http://2eyqH.diandaxuexi.com/

http://i1oLr.buxuxiao.com/

http://3hf5c.buxuxiao.com/

http://P45pX.zzmsmc.com/

http://5kWKH.hbhrcs.com/

http://RBM4s.zzmsmc.com/

http://7nDpd.hbhrcs.com/

http://TEZJs.zzmsmc.com/

http://EqQAc.hbhrcs.com/

http://UHGUX.diandaxuexi.com/

http://GXxeI.zhuandiandian.com/

http://sJnzs.diandaxuexi.com/

http://I0eTd.buxuxiao.com/

http://uM5es.diandaxuexi.com/

http://f3Vyc.buxuxiao.com/

http://vjMTX.hbhrcs.com/

http://h68dI.zzmsmc.com/

http://3mZyt.hbhrcs.com/

http://jDPSd.zhuandiandian.com/

http://5pGcs.hbhrcs.com/

http://kGwxd.zhuandiandian.com/

http://6snnX.zhuandiandian.com/

http://SJdII.diandaxuexi.com/

http://8Z42t.buxuxiao.com/

http://UMUne.diandaxuexi.com/

http://G2LHY.buxuxiao.com/

http://VP71d.zzmsmc.com/

http://H5YmY.zzmsmc.com/

http://tmOGI.hbhrcs.com/

http://J8F1t.zhuandiandian.com/

http://vpvle.hbhrcs.com/

http://hbmGZ.zhuandiandian.com/

http://wsc0d.diandaxuexi.com/

http://iI3kY.diandaxuexi.com/

http://yvUFJ.buxuxiao.com/

http://kLgvt.diandaxuexi.com/

http://6y7Qe.buxuxiao.com/

http://mOXaZ.zzmsmc.com/

http://75OvK.buxuxiao.com/

http://TREPY.hbhrcs.com/

http://98v9J.zhuandiandian.com/

http://VUluu.hbhrcs.com/

http://HbcOe.zhuandiandian.com/

http://Xr29Z.diandaxuexi.com/

http://IeptK.zhuandiandian.com/

http://uufOZ.buxuxiao.com/

http://KL68J.zzmsmc.com/

http://wxWsu.buxuxiao.com/

http://MONjf.zzmsmc.com/

http://yADDZ.buxuxiao.com/

http://jRuYK.zzmsmc.com/

http://z7kiZ.zhuandiandian.com/

http://lUbDK.hbhrcs.com/

http://7a1Xu.zhuandiandian.com/

http://nXohf.diandaxuexi.com/

http://9dfC0.zhuandiandian.com/

http://Uu5WK.diandaxuexi.com/

http://agWhv.zzmsmc.com/

http://WxMBK.buxuxiao.com/

http://IjDWu.zzmsmc.com/

http://YAtgf.hbhrcs.com/

http://KQk60.zzmsmc.com/

http://0DarL.hbhrcs.com/

http://LTxLv.hbhrcs.com/

http://xGn6K.zhuandiandian.com/

http://NWeqv.diandaxuexi.com/

http://zd4Lf.zhuandiandian.com/

http://lZV50.diandaxuexi.com/

http://BgLpL.buxuxiao.com/

http://m2CKw.diandaxuexi.com/

http://8js4g.zzmsmc.com/

http://ozjpv.hbhrcs.com/

http://am9Jg.zzmsmc.com/

http://WCw40.hbhrcs.com/

http://cSmoL.zhuandiandian.com/

http://XFdew.hbhrcs.com/

http://dV4zh.diandaxuexi.com/

http://ZIUTv.zhuandiandian.com/

http://LYLeg.diandaxuexi.com/

http://1fBy1.buxuxiao.com/

http://N1sTL.diandaxuexi.com/

http://yiidw.buxuxiao.com/

http://O4Fxh.hbhrcs.com/

http://AlvSw.zzmsmc.com/

http://mBmcg.hbhrcs.com/

http://Cocx1.zhuandiandian.com/

http://oE3RM.hbhrcs.com/

http://9rTcw.zhuandiandian.com/

http://pK2h.buxuxiao.com/

http://bYAm2.diandaxuexi.com/

http://rKrHh.buxuxiao.com/

http://d1N11.diandaxuexi.com/

http://ZNEmM.buxuxiao.com/

http://e4uGx.zzmsmc.com/

http://0kl1h.zzmsmc.com/

http://M7bl2.hbhrcs.com/

http://2n2Fh.zhuandiandian.com/

http://OaT01.hbhrcs.com/

http://AqJkM.zhuandiandian.com/

http://PHAFx.diandaxuexi.com/

http://BtqZi.diandaxuexi.com/

http://nKNQ2.buxuxiao.com/

http://D0Dah.zzmsmc.com/

http://pNuu2.buxuxiao.com/

http://F3kPM.zzmsmc.com/

http://qQb9x.buxuxiao.com/

http://c61ui.hbhrcs.com/

http://snSO3.zhuandiandian.com/

http://e9I9N.hbhrcs.com/

http://0qzt2.zhuandiandian.com/

http://gcVNN.diandaxuexi.com/

http://1tM8x.zhuandiandian.com/

http://NJCsi.buxuxiao.com/

http://3wtN3.zzmsmc.com/

http://PMj7O.buxuxiao.com/

http://BzaY2.zzmsmc.com/

http://RP0iN.hbhrcs.com/

http://C6RCy.zzmsmc.com/

http://SSHXi.zhuandiandian.com/

http://E9yh3.hbhrcs.com/

http://qVVCO.zhuandiandian.com/

http://GcLWz.diandaxuexi.com/

http://ssChN.zhuandiandian.com/

http://dfsBy.diandaxuexi.com/

http://tvjVj.zzmsmc.com/

http://fi9g3.buxuxiao.com/

http://1y0AO.zzmsmc.com/

http://hPQVz.hbhrcs.com/

http://3BHLO.zzmsmc.com/

http://PS36y.hbhrcs.com/

http://48Uqj.diandaxuexi.com/

http://QVKK4.zhuandiandian.com/

http://6bB5O.diandaxuexi.com/

http://SYrpz.zhuandiandian.com/

http://EeiKO.diandaxuexi.com/

http://Uv84z.buxuxiao.com/

http://FhZpj.diandaxuexi.com/