agenta vulnerabilities

2 known vulnerabilities in agenta from Agenta-AI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  agenta: Server-Side Request Forgery

  CVE-2026-123786Nov 6, 2026Agenta-AI

  Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorizat

• 8.8 High severity

  agenta: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-27961Feb 26, 2026Agenta-AI

  Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server