VulnSocial

CVE-2026-27952Disclosure(agentatech / agenta)

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch agentatech agenta systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but incorrectly whitelisted the `numpy` package as safe within the sandbox. This allowed authenticated users to bypass the sandbox and achieve arbitrary code execution on the API server. The escape path was through `numpy.ma.core.inspect`, which exposes Python's introspection utilities — including `sys.modules` — thereby providing access to unfiltered system-level functionality like `os.system`. This vulnerability affects the Agenta self-hosted platform (API server), not the SDK when used as a standalone Python library. The custom code evaluator runs server-side within the API process. The issue is fixed in v0.48.1 by removing `numpy` from the sandbox allowlist. In later versions (v0.60+), the RestrictedPython sandbox was removed entirely and replaced with a different execution model.

agentatech CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • agenta

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 3 mentions (2026-02-26); latest day: 1
  • 5 total mentions across 3 days

Affected systems

Vendors
agentatech
Products
agenta

Deep dive

Activity timeline5 mentions / 3d
01223Mentions · 2026-02-26: 3Mentions · 2026-03-03: 1Mentions · 2026-03-17: 1Patch / Workaround · 2026-02-26: 1Technical Details · 2026-02-26: 3Technical Details · 2026-03-03: 102-2603-0303-17
Signal classification3 categories
Disclosure
360.0%
Patch
120.0%
General
120.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-02-263
Disclosure2Patch1
2026-03-031
Disclosure1
2026-03-171
General1
Full discourse5 posts
  • Prateek Tomar@Prateektomar
    General

    New security insights: Critical Analysis CVE-2026-27952 - Agenta is an open-source LLMOps platform..... Fresh perspectives on defensive strategies. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-27952-agenta-is-an-open-source-llmops-platform-in-agenta-api-prio

    Post summary

    The post merely references CVE-2026-27952 and links to a blog, but it offers no substantive information on the vulnerability, exploitation, or mitigation.

    1101098
    98 followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-27952 (CVSS:8.8, HIGH) is Analyzed. Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability e..https://nvd.nist.gov/vuln/detail/CVE-2026-27952 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces CVE-2026-27952, a high‑severity Python sandbox escape in Agenta‑API before v0.48.1, with CVSS 8.8, but provides no PoC, exploit, or patch details.

    0000020
    173 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-27952 Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agen… https://www.cve.org/CVERecord?id=CVE-2026-27952

    Post summary

    A Python sandbox escape vulnerability was disclosed in Agenta-API prior to version 0.48.1, affecting the custom code evaluator.

    00000116
    56.6K followersView on X
  • CVETodo@CveTodo
    Disclosure

    CVE-2026-27952 pertains to a security flaw in **Agenta**, an open-source platform designed for managing large language model operations (LLMOps). The vulnerability exists specifically in versions prior to 0.48.1 of Agenta-API, within its custom code evaluator component. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution https://cvetodo.com/cve/CVE-2026-27952

    Post summary

    A new CVE (CVE-2026-27952) affecting Agenta-API before version 0.48.1, specifically in the custom code evaluator, is highlighted as a high‑severity remote code execution vulnerability.

    0000038
    20 followersView on X
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2026-27952: HIGH] Cybersecurity Alert: Vulnerability in Agenta-API (pre v0.48.1) allowed Python sandbox escape via `numpy`. Update to fixed version; issue resolved in v0.48.1.#cve,CVE-2026-27952,#cybersecurity https://cvefind.com/CVE-2026-27952

    Post summary

    The alert reports a high‑severity vulnerability in Agenta‑API that allows Python sandbox escape via numpy and recommends updating to v0.48.1 to remediate the issue.

    0000046
    585 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appagentatechagenta---

Explore more

Back to dashboardagentatech CVEsagenta vulnerabilities