PT-2026-22105 · Agenta · Agenta

Mmabrouk · Published 2026-02-26 · Updated 2026-03-19 · CVE-2026-27961

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Agenta versions prior to 0.86.8

Description Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) issue exists in the API server evaluator template rendering for versions prior to 0.86.8. The vulnerable code is within the SDK package but is executed server-side within the API process when running evaluators. This does not affect standalone SDK usage; it only impacts self-hosted or managed Agenta platform deployments. Server-Side Template Injection (SSTI) allows an attacker to inject malicious code into templates, potentially leading to remote code execution.

Recommendations Upgrade to version 0.86.8 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2026-27961

GHSA-CFR2-MP74-3763

PYSEC-2026-7

Affected Products

Agenta

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27961.json · Exploit
• https://github.com/Agenta-AI/agenta/security/advisories/GHSA-cfr2-mp74-3763 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-27961 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27961 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-7 · Vendor Advisory
• https://t.me/CVEtracker/45808 · Telegram Post
• https://twitter.com/cracbot/status/2028787644436828280 · Twitter Post
• https://raxe.ai/labs/advisories · Reddit Post
• https://twitter.com/CveFindCom/status/2026850203223941262 · Twitter Post
• https://twitter.com/CveTodo/status/2026849712339361792 · Twitter Post
• https://twitter.com/CVEnew/status/2027004215806021887 · Twitter Post
• https://t.me/cveNotify/153798 · Telegram Post