CVE-2026-108819mediumCWE-913

CVE-2026-108819: medium-severity vulnerability in agno-agi agno

agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources

Published · Updated

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.9epss 0.3%
exploitation probability
0.3%top 77% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
agno-agi · agno
public PoCs found — 1
cve_referencegithub.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agent-orchestration-missing-confirmation-gate-code-execution.mdunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — agno-agi agno

In the same product, most dangerous first.

CVE-2025-8665MEDIUMagno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injectionEPSS 1.8%CVE-2026-108817MEDIUMagno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injectionEPSS 1.1%CVE-2026-108818MEDIUMagno-agi agno auth.py get_authentication_dependency missing authenticationEPSS 0.5%CVE-2026-10105HIGHagno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()EPSS 0.4%CVE-2026-108816MEDIUMagno-agi agno PythonTools python.py run_python_code code injectionEPSS 0.3%CVE-2026-108820MEDIUMagno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privilegesEPSS 0.3%
References
https://github.com/Agno-agi/Agno/https://github.com/Agno-agi/Agno/issues/10053https://github.com/agno-agi/agno/pull/10523https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agent-orchestration-missing-confirmation-gate-code-execution.mdhttps://vuldb.com/cve/CVE-2026-108819https://vuldb.com/submit/964164https://vuldb.com/vuln/416596https://vuldb.com/vuln/416596/cti