A critical Server-Side Template Injection vulnerability in Agenta versions prior to 0.86.8 permits remote code execution, posing a severe risk to self-hosted and managed platform deployments.

The platform suffers from a Server-Side Template Injection (SSTI) flaw within its evaluator template rendering process. This vulnerability requires a low-privileged authenticated user to trigger the malicious template rendering on the API server.

The ability to perform Server-Side Template Injection typically results in full remote code execution on the underlying host, leading to total compromise of the application environment. Given the high CVSS score of 8.8, this flaw represents a severe risk to data confidentiality, integrity, and availability. Unauthorized parties could potentially pivot into the broader infrastructure, resulting in significant operational disruption and data exfiltration.

Immediate Action: Administrators must update all Agenta platform deployments to version 0.86.8 or later immediately to resolve the vulnerable template rendering logic.

Proactive Monitoring: Security teams should monitor API server logs for unusual template rendering requests or abnormal outbound connections originating from the Agenta container or host environment.

Compensating Controls: Deploying a Web Application Firewall (WAF) with rules configured to detect and block common template injection payloads can provide a temporary layer of defense while the update process is scheduled.

Public Exploit Available: No

This vulnerability presents a high risk to the integrity of the Agenta platform. Organizations utilizing Agenta for LLMOps must prioritize the deployment of version 0.86.8 to eliminate the underlying injection vector. Failure to remediate this issue could allow an attacker with even minimal platform access to gain complete control over the server environment.