Skip to content
OpenAdvisories

Product · Agenta-AI

agenta

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-123786

    Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

    Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authoriza…

    Agenta-AI agenta
  • High 8.8
    CVE-2026-27961

    Agenta's Server-Side Template Injection (SSTI) via custom evaluator Jinja2 templates allows RCE

    Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed serve…

    Agenta-AI agenta agenta PyPI