agenta-api vulnerabilities

1 known vulnerability in agenta-api from Agenta-AI. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  agenta-api: Improper Control of Generation of Code

  CVE-2026-27952Feb 26, 2026Agenta-AI

  Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but incor