CVE-2026-86237 PUBLISHED

openagents-org openagents http.py test_default_model server-side request forgery

Assigner: VulDB
Reserved: 06.09.2026 Published: 07.09.2026 Updated: 07.09.2026

A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sdk/src/openagents/sdk/transports/http.py. Performing a manipulation of the argument base_url results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used. Endpoint and both sinks unchanged since filing; only the file moved (e277dd1a). Maintainer closed as inapplicable yet the identical unguarded code still ships in 0.9.3.post20. Sibling admin endpoints do call the shipped-but-unused-by-this-handler _require_admin().

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
CVSS Score: 6.9

Product Status

Vendor openagents-org
Product openagents
Versions
  • Version 0.8.0 is affected
  • Version 0.8.1 is affected
  • Version 0.8.2 is affected
  • Version 0.8.3 is affected
  • Version 0.8.4 is affected
  • Version 0.8.5 is affected
  • Version 0.8.6 is affected
  • Version 0.8.7 is affected
  • Version 0.8.8 is affected
  • Version 0.8.9 is affected
  • Version 0.8.10 is affected
  • Version 0.8.11 is affected
  • Version 0.8.12 is affected
  • Version 0.8.13 is affected
  • Version 0.8.14 is affected
  • Version 0.8.15 is affected
  • Version 0.8.16 is affected
  • Version 0.8.17 is affected
  • Version 0.8.18 is affected
  • Version 0.8.19 is affected
  • Version 0.9.3.post20 is affected

Credits

  • yangzhongjie (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Server-Side Request Forgery CWE