Agenta-AI vulnerabilities
We track 3 vulnerabilities in Agenta-AI products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
Latest Agenta-AI vulnerabilities
- 8.5 High severity
agenta: Server-Side Request Forgery
Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorizat
- 8.8 High severity
agenta: Improper Neutralization of Special Elements Used in a Template Engine
Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server
- 9.9 Critical severity
agenta-api: Improper Control of Generation of Code
Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but incor