https://feed.craftedsignal.io/vendors/agenta/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 17:26:18 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-agenta-ssrf/Fri, 06 Nov 2026 17:26:18 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-agenta-ssrf/Agenta versions before 0.122.5 contain a server-side request forgery vulnerability allowing workspace members with workflow edit rights to redirect workflow invocations via arbitrary revision URLs.<p>Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets from the vault API, or reach internal and cloud metadata addresses.</p> highadvisory