Threats tagged 'ghsa-xx4h-9g3r-79qc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.4	CVE-2026-123786Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow High8.42026-11-06GCVE DatabaseCVE-2026-123786 Agenta versions prior to 0.122.5 have a server-side request forgery (SSRF) vulnerability. This flaw allows workspace members with workflow edit permissions to redirect workflow invocations by specifying arbitrary revision URLs. Exploiting this, attackers can capture secret-resolve Authorization tokens and access provider secrets from the vault API or reach internal and cloud metadata endpoints. Report on CVE-2026-123786 Vulnerability CWE-918 #ghsa-xx4h-9g3r-79qc	GCVE Database	2026-11-06

Page 1 of 1