agno vulnerabilities
CVEs whose affected-version data names the agno package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
10 CVEsRSS
CVE-2026-108820Medium· 6.3PoCA weakness has been identified in agno-agi agno up to 3.0.6/3.1.1
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can le…
CVE-2026-108819High· 7.3PoCA security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-manage…
CVE-2026-108818High· 7.3PoCA vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack ma…
CVE-2026-108817Medium· 5.5PoCA vulnerability was determined in agno-agi agno up to 3.0.9
A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument …
CVE-2026-108816Medium· 6.3PoCA vulnerability was found in agno-agi agno up to 3.0.6
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. T…
CVE-2026-76832High· 8.8Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_name argument pas…
Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_name argument pas…
CVE-2026-10105High· 8.3PoCagno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method
agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method. Att…
GHSA-77rh-m34w-rv36CriticalDuplicate Advisory: Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
Duplicate Advisory: Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
CVE-2026-35002Critical· 9.8Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval()
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers …
CVE-2025-64168High· 7.1Agno session state overwrites between different sessions/users
Agno session state overwrites between different sessions/users