CVE-2026-27961

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2026-27961 is a Server-Side Template Injection (SSTI) vulnerability, classified under CWE-1336, affecting Agenta, an open-source LLMOps platform. The issue resides in the evaluator template rendering of Agenta's API server, specifically in versions prior to 0.86.8. While the vulnerable code is located in the SDK package, it is executed server-side within the API process during evaluator runs. This vulnerability impacts only self-hosted or managed Agenta platform deployments and does not affect standalone SDK usage.

Attackers with low privileges (PR:L) can exploit this vulnerability over the network (AV:N) with low complexity (AC:L) and no user interaction (UI:N), achieving high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H), as scored at CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation typically involves injecting malicious templates during evaluator execution, potentially leading to remote code execution on the API server.

The GitHub security advisory at https://github.com/Agenta-AI/agenta/security/advisories/GHSA-cfr2-mp74-3763 details the issue, confirming that version 0.86.8 includes a fix. Security practitioners should upgrade to this version or later in affected deployments to mitigate the vulnerability.

As an LLMOps platform, Agenta is used in AI/ML workflows for managing large language model operations, making this SSTI particularly relevant for organizations deploying such tools in production environments. No public information on real-world exploitation is available as of the CVE publication on 2026-02-26.