PT-2026-110523 · Agno Agi · Agno

·

CVE-2026-108820

·

Published

2026-10-12

·

Updated

2026-10-12

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member agent.run in the library libs/agno/agno/team/ default tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-108820

Affected Products

Agno