Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-123786 1 Agentatech 1 Agenta 2026-11-06 8.5 High
Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets from the vault API, or reach internal and cloud metadata addresses.