Description
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-12
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Apply Patch
AI Analysis

Impact

The run_python_code feature in the PythonTools component of agno-agi’s agno platform allows code injection through the unvalidated ‘code’ argument. This flaw enables an attacker to execute arbitrary Python code on the host, leading to remote code execution. The vulnerability affects all versions up to 3.0.6 and is rated with a CVSS score of 5.3, indicating moderate severity.

Affected Systems

The affected product is agno by agno-agi. Vulnerable releases include all versions up to 3.0.6. No further version information is available in the advisory.

Risk and Exploitability

The attack can be launched remotely and the exploit has been made public, implying that the flaw can be used in the wild. Although EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, the presence of a public exploit and a CVSS score of 5.3 suggest a moderate risk of exploitation in environments where the run_python_code endpoint remains exposed.

Generated by OpenCVE AI on October 12, 2026 at 10:24 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade agno to a version newer than 3.0.6 that contains the fix.
  • If an upgrade is not possible, disable or remove the PythonTools run_python_code feature from the application.
  • Validate the ‘code’ parameter rigorously—apply input filtering or a whitelist of allowed expressions.
  • Deploy a web application firewall to block suspicious code injection payloads.

Generated by OpenCVE AI on October 12, 2026 at 10:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 12 Oct 2026 09:00:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Title agno-agi agno PythonTools python.py run_python_code code injection
First Time appeared Agno-agi
Agno-agi agno
Weaknesses CWE-74
CWE-94
CPEs cpe:2.3:a:agno-agi:agno:*:*:*:*:*:*:*:*
Vendors & Products Agno-agi
Agno-agi agno
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Agno-agi Agno
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-15T15:15:56.557Z

Reserved: 2026-10-11T10:41:24.895Z

Link: CVE-2026-108816

cve-icon Vulnrichment

Updated: 2026-10-15T14:50:33.168Z

cve-icon NVD

Status : Deferred

Published: 2026-10-12T09:16:43.037

Modified: 2026-10-15T16:17:38.317

Link: CVE-2026-108816

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-12T10:45:10Z

Weaknesses
  • CWE-74

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')