The legacy Letta V1 server preserved on the archive branch is unsupported and receives no security updates. It should not be used in production.
Please email support@letta.com with a description of the vulnerability, steps to reproduce, and any relevant details. Do not open a public issue for security vulnerabilities.