agno has 3 CVEs on record between 2025 and 2026. The median CVSS is 8.4 (high), with 2 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.4
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- agno 3
3
Total CVEs
2
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-35002Critical· 9.8Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval()54GHSA-77rh-m34w-rv36CriticalDuplicate Advisory: Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`52CVE-2025-64168High· 7.1Agno session state overwrites between different sessions/users39
agno vulnerabilities
CVEs affecting agno, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
GHSA-77rh-m34w-rv36CriticalDuplicate Advisory: Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
Duplicate Advisory: Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
▾ Midnightagno · agnovia GHSA
CVE-2026-35002Critical· 9.8Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval()
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers …
▾ Midnightagno · agnoEPSS 0.84%via NVD
CVE-2025-64168High· 7.1Agno session state overwrites between different sessions/users
Agno session state overwrites between different sessions/users
▾ Twilightagno · agnoEPSS 0.16%via OSV