A weakness exists in agno-agi's agno library up through versions 3.0.6 and 3.1.1, specifically within the member_agent.run function of the Delegation Feature. The function lacks proper privilege validation, allowing an attacker to invoke it with higher‑than‑intended permissions. The flaw can be triggered remotely, giving an adversary the ability to run code or perform actions with unnecessary privileges, effectively elevating their access level.

Vendor agno-agi offers the agno product, and the vulnerability affects all installations of agno up to and including 3.0.6 and 3.1.1 of the Delegation Feature library component.

The CVSS score of 5.3 indicates medium severity. The EPSS score is not available, and it is not listed in CISA's KEV catalog, though the exploit is publicly available. The attack vector is remote, requiring network access to the vulnerable component. This makes the flaw relevant for systems exposing the Delegation Feature to remote users, and an attacker could gain elevated privileges without additional compromise.