agno framework discloses multiple command injection and missing authentication CVEs
Start here
NVD registered 5 new CVEs for agno (agno-agi) on October 12, covering CodingTools command injection, PythonTools code injection, AgentOS missing default authentication, orchestration layer dynamic code execution, and excessive team delegation privileges. Among them, CodingTools.run_shell command injection is CVE-2026-108817, affecting versions 3.0.9 and earlier, with a CVSS 3.1 score of 5.5. The official statement says upgrading to 3.0.10 or commit ed64fab fixes it.
Generated by AI from reports · Updated 10 hr ago
Progress timeline
- NIST NVDSelectedagno discloses CVEs including CodingTools command injection (CVE-2026-108816–108820)
NVD registered 5 new CVEs for agno (agno-agi) on October 12, covering CodingTools command injection, PythonTools code injection, AgentOS missing default authentication, orchestration layer dynamic code execution, and excessive team delegation privileges. The CodingTools.run_shell command injection is CVE-2026-108817, affecting versions 3.0.9 and earlier, with a CVSS 3.1 score of 5.5. The official statement says upgrading to 3.0.10 or commit ed64fab fixes it (GHSA-gfx7-4mpr-25fj). AgentOS get_authentication_dependency missing authentication (CVE-2026-108818) and orchestration layer exec dynamic code (CVE-2026-108819) both have CVSS scores of 7.3, affecting up to 2.7.3/3.0.6 and 3.0.6/3.1.1 respectively.
Related discussion
Attention trend
New sources per day
- Oct 13: 1 new sources (1 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)