CVE-2026-27961

Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server-side within the API process when running evaluators. This does not affect standalone SDK usage — it only impacts self-hosted or managed Agenta platform deployments. Version 0.86.8 contains a fix for the issue.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Agenta-AI/agenta/security/advisories/GHSA-cfr2-mp74-3763	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:agentatech:agenta:*:*:*:*:*:*:*:*

History

17 Jun 2026, 10:27

Type	Values Removed	Values Added
Summary		(es) Agenta es una plataforma LLMOps de código abierto. Una vulnerabilidad de inyección de plantillas del lado del servidor (SSTI) existe en versiones anteriores a la 0.86.8 en la renderización de plantillas del evaluador del servidor API de Agenta. Aunque el código vulnerable reside en el paquete SDK, se ejecuta del lado del servidor dentro del proceso de la API al ejecutar evaluadores. Esto no afecta el uso autónomo del SDK — solo afecta las implementaciones de la plataforma Agenta autoalojadas o gestionadas. La versión 0.86.8 contiene una solución para el problema.

02 Mar 2026, 18:40

Type	Values Removed	Values Added
References	~~() https://github.com/Agenta-AI/agenta/security/advisories/GHSA-cfr2-mp74-3763 -~~	() https://github.com/Agenta-AI/agenta/security/advisories/GHSA-cfr2-mp74-3763 - Vendor Advisory
First Time		Agentatech Agentatech agenta
CPE		cpe:2.3:a:agentatech:agenta::::::::

26 Feb 2026, 02:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-02-26 02:16

Updated : 2026-06-17 10:27

NVD link : CVE-2026-27961

Mitre link : CVE-2026-27961

CVE.ORG link : CVE-2026-27961

JSON object : View

Products Affected

agentatech

agenta

CWE

CWE-1336

Improper Neutralization of Special Elements Used in a Template Engine

{"id": "CVE-2026-27961", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27961", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-02-26T19:28:54.001382Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "Agenta-AI", "product": "agenta", "versions": [{"status": "affected", "version": "< 0.86.8"}]}]}], "published": "2026-02-26T02:16:23.483", "references": [{"url": "https://github.com/Agenta-AI/agenta/security/advisories/GHSA-cfr2-mp74-3763", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-1336"}]}], "descriptions": [{"lang": "en", "value": "Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server-side within the API process when running evaluators. This does not affect standalone SDK usage \u2014 it only impacts self-hosted or managed Agenta platform deployments. Version 0.86.8 contains a fix for the issue."}, {"lang": "es", "value": "Agenta es una plataforma LLMOps de c\u00f3digo abierto. Una vulnerabilidad de inyecci\u00f3n de plantillas del lado del servidor (SSTI) existe en versiones anteriores a la 0.86.8 en la renderizaci\u00f3n de plantillas del evaluador del servidor API de Agenta. Aunque el c\u00f3digo vulnerable reside en el paquete SDK, se ejecuta del lado del servidor dentro del proceso de la API al ejecutar evaluadores. Esto no afecta el uso aut\u00f3nomo del SDK \u2014 solo afecta las implementaciones de la plataforma Agenta autoalojadas o gestionadas. La versi\u00f3n 0.86.8 contiene una soluci\u00f3n para el problema."}], "lastModified": "2026-06-17T10:27:58.610", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:agentatech:agenta:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF609F89-BEC4-4CB7-8818-18575B3796E2", "versionEndExcluding": "0.86.8"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}