Johnchen

**Name of the Vulnerable Software and Affected Versions** letta-ai LettaBot version 0.2.0 **Description** A remote issue exists in the API Status Route component within the `src/api/server.ts` file. The flaw allows for missing authentication, enabling an attacker to bypass security checks remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ananocoai NanoClaw versions prior to 2.0.65 **Description** A path traversal issue exists in the `send file` component within the file `container/agent-runner/src/mcp-tools/core.ts`. This flaw allows a remote attacker to manipulate file paths to access unauthorized locations. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly validated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.