CVE-2026-119050

Name of the Vulnerable Software and Affected Versions Agno versions prior to 3.1.12

Description An unsafe reflection issue exists in PandasTools where model-controlled function names are passed to the getattr() function. This allows an attacker to use prompt injection to invoke arbitrary pandas functions. For example, an attacker could trigger pandas.read pickle() on a controlled path to achieve remote code execution or use other reader functions to access local files.

Recommendations Update to version 3.1.12 or later. Restrict the functions that can be called by implementing an allowlist for the getattr() function in PandasTools.