CVE-2026-123786— Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Quick assessment

Affected

Agenta-AI agenta

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在版本 0.122.5 之前的 Agenta 存在服务端请求伪造（SSRF）漏洞。该漏洞允许拥有工作流编辑权限的工作区成员，通过设置任意的修订版 URL 来重定向工作流调用。攻击者可借此窃取附加的 secret-resolve 授权令牌，从而从 Vault API 读取提供者密钥，或访问内部网络及云元数据地址。

CVSS 8.5 · High Updated Nov 06, 2026

Possible ATT&CK Techniques 3 AI

T1003 · OS Credential Dumping T1048 · Exfiltration Over Alternative Protocol T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Source: CVE Program / CVE List V5

Vulnerability Description

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets from the vault API, or reach internal and cloud metadata addresses.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Agenta-AI	agenta	0 ~ 0.122.5	-

II. Public POCs for CVE-2026-123786

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-123786

请登录查看更多情报信息。

Other References for CVE-2026-123786 (7)

https://github.com/Agenta-AI/agenta/commit/95fedd72a8b2bab810f80907f58c09f8bb579d94 patch
https://github.com/Agenta-AI/agenta/pull/7530 issue-tracking patch
https://github.com/Agenta-AI/agenta/releases/tag/v0.122.5 release-notes
https://github.com/Agenta-AI/agenta/blob/v0.122.4/api/oss/src/core/workflows/service.py#L785-L805 technical-description
https://github.com/Agenta-AI/agenta/security/advisories/GHSA-wx6j-82pp-wx76 vendor-advisory
https://github.com/Agenta-AI/agenta/security/advisories/GHSA-pr74-8wxx-gj2h vendor-advisory
https://www.vulncheck.com/advisories/agenta-before-0.122.5-ssrf-via-workflow-revision-url-leaks-secret-token third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-123786

IV. Related Vulnerabilities

Same product: agenta

CVE-2026-27961
Agenta's Server-Side Template Injection (SSTI) via custom ev

Same vendor: Agenta-AI

Same weakness: CWE-918