Search for packages
| purl | pkg:pypi/agenta@0.27.7a0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-t8a1-n3qb-kqaw
Aliases: CVE-2026-27952 GHSA-pmgp-2m3v-34mq PYSEC-2026-6 |
Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but incorrectly whitelisted the `numpy` package as safe within the sandbox. This allowed authenticated users to bypass the sandbox and achieve arbitrary code execution on the API server. The escape path was through `numpy.ma.core.inspect`, which exposes Python's introspection utilities — including `sys.modules` — thereby providing access to unfiltered system-level functionality like `os.system`. This vulnerability affects the Agenta self-hosted platform (API server), not the SDK when used as a standalone Python library. The custom code evaluator runs server-side within the API process. The issue is fixed in v0.48.1 by removing `numpy` from the sandbox allowlist. In later versions (v0.60+), the RestrictedPython sandbox was removed entirely and replaced with a different execution model. |
Affected by 1 other vulnerability. |
|
VCID-y29h-1vhn-2bce
Aliases: CVE-2026-27961 GHSA-cfr2-mp74-3763 PYSEC-2026-7 |
Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server-side within the API process when running evaluators. This does not affect standalone SDK usage — it only impacts self-hosted or managed Agenta platform deployments. Version 0.86.8 contains a fix for the issue. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-31T09:47:26.587373+00:00 | PyPI Importer | Affected by | VCID-y29h-1vhn-2bce | https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip | 38.6.0 |
| 2026-05-31T09:47:25.864225+00:00 | PyPI Importer | Affected by | VCID-t8a1-n3qb-kqaw | https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip | 38.6.0 |
| 2026-05-30T20:37:20.209427+00:00 | Pypa Importer | Affected by | VCID-y29h-1vhn-2bce | https://github.com/pypa/advisory-database/blob/main/vulns/agenta/PYSEC-2026-7.yaml | 38.6.0 |
| 2026-05-30T20:37:18.815220+00:00 | Pypa Importer | Affected by | VCID-t8a1-n3qb-kqaw | https://github.com/pypa/advisory-database/blob/main/vulns/agenta/PYSEC-2026-6.yaml | 38.6.0 |