Skip to content
OpenAdvisories

Product · Agenta-AI

agenta-api

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Agenta has Python Sandbox Escape, Leading to Remote Code Execution (RCE)

    Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but inco…