Agenta-AI

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Agenta-AI records in CISA KEV

No Agenta-AI vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-85966 CVE-2026-123786 · GHSA-xx4h-9g3r-79qc

Server-side request forgery in Agenta lets members steal secret tokens

LOW 36

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs.

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00223 Published 2026-11-06 Fixed in 0.122.5 CWE-918

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0