tocsin

CVE-2026-27952

1 advisory.

PyPI/agenta CVE-2026-27952: critical 9.9, EPSS 0.74%

Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sand

Action: Upgrade agenta to 0.48.1 or later.

pip install agenta==0.48.1

Affected

introducedfixedlast affected
00.48.1-

Fixed versions

0.48.1

Sources

CVE-2026-27952 · published · modified · JSON