Description
Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets from the vault API, or reach internal and cloud metadata addresses.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Agenta-AI | agenta | < 0.122.5 | 0.122.5 |
References
- GitHub Security Advisory (GHSA-pr74-8wxx-gj2h) vendor-advisory
- GitHub Security Advisory (GHSA-wx6j-82pp-wx76) vendor-advisory
- Fix pull request #7530 issue-tracking patch
- Fix merge commit patch
- agenta v0.122.5 Release Notes release-notes
- Outbound request in WorkflowsService technical-description
- VulnCheck Advisory: Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token third-party-advisory