agno discloses CVEs including CodingTools command injection (CVE-2026-108816–108820)
agno 同日披露 CodingTools 命令注入等 CVE（CVE-2026-108816–108820）
NVD registered 5 new CVEs for agno (agno-agi) on October 12, covering CodingTools command injection, PythonTools code injection, AgentOS missing default authentication, orchestration layer dynamic code execution, and excessive team delegation privileges. The CodingTools.run_shell command injection is CVE-2026-108817, affecting versions 3.0.9 and earlier, with a CVSS 3.1 score of 5.5. The official statement says upgrading to 3.0.10 or commit ed64fab fixes it (GHSA-gfx7-4mpr-25fj). AgentOS get_authentication_dependency missing authentication (CVE-2026-108818) and orchestration layer exec dynamic code (CVE-2026-108819) both have CVSS scores of 7.3, affecting up to 2.7.3/3.0.6 and 3.0.6/3.1.1 respectively.
This batch of agno CVEs covers command injection, missing default authentication, and delegation privilege escalation. Teams using this agent framework can use it to check affected versions and fix status.