CVE-2026-86237: Server-Side Request Forgery in openagents-org openagents

The vulnerability CVE-2026-86237 in openagents-org openagents up to versions 0.8.19 and 0.9.3.post20 allows an attacker to perform server-side request forgery by manipulating the base_url parameter in the test_default_model function located in sdk/src/openagents/sdk/transports/http.py. This flaw enables an unauthenticated remote attacker to cause the server to make arbitrary HTTP requests. The endpoint and sinks have not changed since the vulnerability was reported, only the file location changed. Despite the maintainer marking the issue as inapplicable, the vulnerable code remains present and unprotected by admin checks in the affected versions.

An unauthenticated remote attacker can exploit this vulnerability to induce the server to make arbitrary HTTP requests, potentially accessing internal resources or services not otherwise accessible. This can lead to information disclosure or further attacks leveraging internal network access. The vulnerability is rated medium severity with a CVSS 4.0 score of 6.9.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The maintainer has closed the issue as inapplicable, but the vulnerable code remains in the affected versions. Until an official fix is available, users should consider restricting access to the vulnerable function or applying custom mitigations to validate or sanitize the base_url parameter to prevent SSRF.