agno-agi vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 20267

Newest CVEs

• CVE-2026-119050

  Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection

  agno-agi · agno

  Critical9.2
• CVE-2026-108820

  agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges

  agno-agi · agno

  Medium5.3
• CVE-2026-108819

  agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources

  agno-agi · agno

  Medium6.9
• CVE-2026-108818

  agno-agi agno auth.py get_authentication_dependency missing authentication

  agno-agi · agno

  Medium6.9
• CVE-2026-108817

  agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection

  agno-agi · agno

  Medium5.1
• CVE-2026-108816

  agno-agi agno PythonTools python.py run_python_code code injection

  agno-agi · agno

  Medium5.3
• CVE-2026-10105

  agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()

  agno-agi · agno

  High8.7
• CVE-2025-64168

  Agno session state overwrites between different sessions/users

  agno-agi · agno

  High7.1
• CVE-2025-8665

  agno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injection

  agno-agi · agno

  Medium5.3