Server-Side Request Forgery in Agenta Software by Agenta AI
CVE-2026-123786

8.4HIGH

Key Information:

Vendor

Agenta-ai

Status
Agenta
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123786?

Agenta software prior to version 0.122.5 is susceptible to a server-side request forgery (SSRF) vulnerability. This security flaw enables users with workflow edit permissions to manipulate workflow invocation processes by providing arbitrary revision URLs. Subsequently, attackers can intercept the crucial secret-resolve Authorization token, granting them unauthorized access to sensitive provider secrets via the vault API. Additionally, this vulnerability could allow attackers to reach internal and cloud metadata addresses, escalating potential security risks.

Affected Version(s)

agenta 0 < 0.122.5

References

https://github.com/Agenta-AI/agenta/security/advisories/G...
vendor-advisory
https://github.com/Agenta-AI/agenta/security/advisories/G...
vendor-advisory
https://github.com/Agenta-AI/agenta/pull/7530
issue-trackingpatch

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

William Goodfellow
Syed Anas Mohiuddin
Bandana (HackWitHer), APIsec Research Labs
.