A vulnerability allows an attacker to supply a malicious command string to the run_shell function in the Agno CodingTools library. The function executes the supplied argument using the operating system shell, leading to potential arbitrary command execution on the host. This flaw can be exploited remotely, and the vulnerability has already been publicly disclosed, meaning that attackers may readily develop and deploy exploits.

The flaw affects Agno-agi:agno product up to version 3.0.9. An upgrade to version 3.0.10—or later releases—includes the fix. All users of the agno component should verify that they are running the patched version.

The CVSS severity rating is 5.1, indicating moderate impact. The EPSS score is 1%, and the vulnerability is not listed in the CISA KEV catalog, but the existence of a public exploit and the ability to trigger the flaw remotely raise the practical risk. The likely attack vector is remote code injection via the run_shell interface; an attacker may embed shell commands or augment the command string to achieve privilege escalation depending on the execution context.