CVE-2026-123786

Agenta versions before 0.122.5 are vulnerable to a server-side request forgery (SSRF) vulnerability. Workspace members with workflow edit rights can exploit this by setting arbitrary revision URLs to redirect workflow invocations. This flaw allows attackers to capture the secret-resolve Authoriza...