openagents-org

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

openagents-org records in CISA KEV

No openagents-org vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-59024 CVE-2026-86237 · GHSA-969x-2pm2-x3hx

openagents-org openagents http.py test_default_model server-side request forgery

HIGH 70

A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00537 Published 2026-09-07 No fix listed CWE-918

TI-2026-70718 CVE-2026-108739 · GHSA-66fr-h599-fx6p

OpenAgents Workspace exposes API keys to unauthenticated users

MEDIUM 44

OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00323 Published 2026-10-11 No fix listed CWE-306

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0