Skip to content
OpenAdvisories

Package · PyPI

agenta

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2026-27961

    Agenta's Server-Side Template Injection (SSTI) via custom evaluator Jinja2 templates allows RCE

    Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed serve…

    Agenta-AI agenta agenta PyPI
  • High 8.8
    CVE-2026-27952

    Agenta has Python Sandbox Escape, Leading to Remote Code Execution (RCE)

    Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but inco…

    Agenta-AI agenta-api agenta PyPI