CVE-2026-123786 Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token
HighCVSS 8.4
EPSS 0.22%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets from the vault API, or reach internal and cloud metadata addresses.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| agenta-ai/agenta | < 0.122.5 | 0.122.5 |
References
- GitHub Security Advisory (GHSA-pr74-8wxx-gj2h) vendor-advisory
- GitHub Security Advisory (GHSA-wx6j-82pp-wx76) vendor-advisory
- Fix pull request #7530 issue-tracking patch
- Fix merge commit patch
- agenta v0.122.5 Release Notes release-notes
- Outbound request in WorkflowsService technical-description
- VulnCheck Advisory: Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token third-party-advisory