tocsin

CVE-2026-27961

1 advisory.

PyPI/agenta CVE-2026-27961: high 8.8, EPSS 0.56%

Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vul

Action: Upgrade agenta to 0.86.8 or later.

pip install agenta==0.86.8

Affected

introducedfixedlast affected
00.86.8-

Fixed versions

0.86.8

Sources

CVE-2026-27961 · published · modified · JSON