Vendor
Agenta versions before 0.122.5 contain a server-side request forgery vulnerability allowing workspace members with workflow edit rights to redirect workflow invocations via arbitrary revision URLs.