agno-agi agno
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-119050 | ≤ 3.1.11 | Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection | CRITICAL 9.2 | 0.4 % | ||
| CVE-2026-108820 | 3.0.0 ; 3.0.1 ; 3.0.2 ; … | agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-108819 | 3.0.0 ; 3.0.1 ; 3.0.2 ; … | agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-108818 | 2.7.0 ; 2.7.1 ; 2.7.2 ; … | agno-agi agno auth.py get_authentication_dependency missing authentication | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-108817 | 3.0.0 ; 3.0.1 ; 3.0.2 ; … | agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection | MEDIUM 5.1 | 1.1 % | ||
| CVE-2026-108816 | 3.0.0 ; 3.0.1 ; 3.0.2 ; … | agno-agi agno PythonTools python.py run_python_code code injection | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-76832 | ≤ 710d7e7 | Agno PythonTools Path Traversal via joinpath file_name argument | HIGH 8.5 | 1.3 % | ||
| CVE-2026-10105 | ≤ 2.6.5 ; ≤ 26a7439b803c0ccc9a58ee53572d8088a678923f ; ≤ a0ec99305e782e68ba26f5966c53ad50b5f40132 | agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata() | HIGH 8.7 | 0.4 % | ||
| CVE-2025-64168 | >= 2.0.0, < 2.2.2 | Agno session state overwrites between different sessions/users | HIGH 7.1 | 0.2 % | ||
| CVE-2025-8665 | 1.7.0 ; 1.7.1 ; 1.7.2 ; … | agno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injection | MEDIUM 5.3 | 1.5 % |