CVE-2026-123786

EUVD-2026-118304
Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets from the vault API, or reach internal and cloud metadata addresses.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.5 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://github.com/Agenta-AI/agenta/blob/v0.122.4/api/oss/src/core/workflows/service.py#L785-L805
https://github.com/Agenta-AI/agenta/commit/95fedd72a8b2bab810f80907f58c09f8bb579d94
https://github.com/Agenta-AI/agenta/pull/7530
https://github.com/Agenta-AI/agenta/releases/tag/v0.122.5
https://github.com/Agenta-AI/agenta/security/advisories/GHSA-pr74-8wxx-gj2h
https://github.com/Agenta-AI/agenta/security/advisories/GHSA-wx6j-82pp-wx76
https://www.vulncheck.com/advisories/agenta-before-0.122.5-ssrf-via-workflow-revision-url-leaks-secret-token