CVE-2026-123786: Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Published Nov 6, 2026

Updated

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets from the vault API, or reach internal and cloud metadata addresses.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Agenta to a version that resolves this vulnerability.
Fixed in 0.122.5

Event History

Nov 6, 2026

CVE Published

via MITRE·03:01 PM

Data Sourced

via MITRE·03:01 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A workspace member needs workflow edit rights. The issue is exploitable by configuring an arbitrary workflow revision URL and causing a workflow invocation to be redirected.

What could an attacker access through the forged request?

An attacker can capture the secret-resolve Authorization token attached to the request and use it to read provider secrets from the vault API. They may also direct requests to internal services or cloud metadata addresses.

Which versions are affected?

Agenta versions before 0.122.5 are affected.

CVE-2026-123786: Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What could an attacker access through the forged request?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could an attacker access through the forged request?

Which versions are affected?