CVE-2026-123786

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets fr...

CVE-2026-123786

Agenta versions before 0.122.5 are vulnerable to a server-side request forgery (SSRF) vulnerability. Workspace members with workflow edit rights can exploit this by setting arbitrary revision URLs to redirect workflow invocations. This flaw allows attackers to capture the secret-resolve Authoriza...

EUVD-2026-118304

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets fr...

CVE-2026-123786 Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets fr...

CVE-2026-123786: Agenta-AI agenta: Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow…

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets fr...

CVE-2026-55100 hashi-vault-js has a path traversal and query parameter injection

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query strings instead of using encodeURIComponent and...

CVE-2026-55100 hashi-vault-js has a path traversal and query parameter injection

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query strings instead of using encodeURIComponent and...

CVE-2026-55100

CVE-2026-55100 affects the Node.js module hashi-vault-js . The vulnerable component is the internal path construction in src/Vault.js, which concatenates unencoded identifier values (e.g., name, username, group, role, version) into request paths and query strings instead of using proper encoding,...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the kvv2 process. An attacker can cause unauthorized deletion of secrets by exploiting policy configurations containing a glob pattern, which may result in service disruption...

EUVD-2024-2227

Malicious code in bioql PyPI...

EUVD-2024-53883

Malicious code in bioql PyPI...

MAL-2025-47515 Malicious code in vault-api-redux-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in vault-api-redux-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment via the identity endpoint in the root namespace. An attacker can gain unauthorized access to elevated privileges by modifying token permissions to use the root policy. Remediation Upgrade...

CVE-2025-4166

Vault Community and Vault Enterprise Key/Value kv Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is...

CVE-2024-43779

An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to reading vaults that have been previously disabled, possibly leaking sensitive credentials. An attacker can send a series of HTTP...

CVE-2024-43779

CVE-2024-43779 is a information-disclosure vulnerability in ClearML Enterprise Server 3.22.5-1533. The root cause is that the Vault API can expose disabled vault items, allowing an authenticated user to retrieve vault contents via API requests (notably GET /api/v2.30/users.get_vaults). Cisco Talo...

PT-2025-5837

Name of the Vulnerable Software and Affected Versions: ClearML Enterprise Server version 3.22.5-1533 Description: An information disclosure issue exists in the Vault API functionality. A specially crafted HTTP request can lead to reading vaults that have been previously disabled, possibly leaking...

ClearML Vault API disabled vaults retrieval vulnerability

Talos Vulnerability Report TALOS-2024-2112 ClearML Vault API disabled vaults retrieval vulnerability February 6, 2025 CVE Number CVE-2024-43779 SUMMARY An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP...

CVE-2024-43779: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to reading vaults that have been previously disabled, possibly leaking sensitive credentials. An attacker can send a series of HTTP...