Agenta-AI
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| agenta | 1 | – | Feb 26, 2026 |
| agenta-api | 1 | – | Feb 26, 2026 |
Exploited and recent CVEs
- CVE-2026-27961 Agenta's Server-Side Template Injection (SSTI) via custom evaluator Jinja2 templates allows RCE 0.4%
- CVE-2026-27952 Agenta has Python Sandbox Escape, Leading to Remote Code Execution (RCE) 0.6%