CVE-2026-108817: medium-severity vulnerability in agno-agi agno
agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection
Published · Updated
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.1epss 1.1%
exploitation probability
1.1%top 36% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can resolve this issue. Patch name: ed64fab5be63d2b15faddc2ef7c733176daa14aa. You should upgrade the affected component.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
agno-agi · agnopublic PoCs found — 1
cve_referencegithub.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-codingtools-run-shell-disallowlist-bypass-command-execution.mdunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — agno-agi agno
In the same product, most dangerous first.
CVE-2025-8665MEDIUMagno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injectionEPSS 1.8%CVE-2026-108818MEDIUMagno-agi agno auth.py get_authentication_dependency missing authenticationEPSS 0.5%CVE-2026-10105HIGHagno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()EPSS 0.4%CVE-2026-108819MEDIUMagno-agi agno Agent Orchestration Layer exec dynamically-managed code resourcesEPSS 0.3%CVE-2026-108816MEDIUMagno-agi agno PythonTools python.py run_python_code code injectionEPSS 0.3%CVE-2026-108820MEDIUMagno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privilegesEPSS 0.3%
References
https://github.com/Agno-agi/Agno/https://github.com/agno-agi/agno/commit/ed64fab5be63d2b15faddc2ef7c733176daa14aahttps://github.com/Agno-agi/Agno/issues/10048https://github.com/agno-agi/agno/pull/10210https://github.com/agno-agi/agno/releases/tag/v3.0.10https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-codingtools-run-shell-disallowlist-bypass-command-execution.mdhttps://vuldb.com/cve/CVE-2026-108817https://vuldb.com/submit/964160https://vuldb.com/submit/964161https://vuldb.com/vuln/416594https://vuldb.com/vuln/416594/cti