CVE-2026-108820mediumCWE-250

CVE-2026-108820: medium-severity vulnerability in agno-agi agno

agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges

Published · Updated

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.3epss 0.3%
exploitation probability
0.3%top 81% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
agno-agi · agno
public PoCs found — 1
cve_referencegithub.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-team-delegation-without-scoping-or-confirmation.mdunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — agno-agi agno

In the same product, most dangerous first.

CVE-2025-8665MEDIUMagno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injectionEPSS 1.8%CVE-2026-108817MEDIUMagno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injectionEPSS 1.1%CVE-2026-108818MEDIUMagno-agi agno auth.py get_authentication_dependency missing authenticationEPSS 0.5%CVE-2026-10105HIGHagno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()EPSS 0.4%CVE-2026-108819MEDIUMagno-agi agno Agent Orchestration Layer exec dynamically-managed code resourcesEPSS 0.3%CVE-2026-108816MEDIUMagno-agi agno PythonTools python.py run_python_code code injectionEPSS 0.3%
References
https://github.com/Agno-agi/Agno/https://github.com/Agno-agi/Agno/issues/10054https://github.com/agno-agi/agno/pull/10124https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-team-delegation-without-scoping-or-confirmation.mdhttps://vuldb.com/cve/CVE-2026-108820https://vuldb.com/submit/964165https://vuldb.com/vuln/416597https://vuldb.com/vuln/416597/cti