Vendors / agno-agi Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now agno-agi records in CISA KEV No agno-agi vulnerabilities are listed in CISA KEV.
Priority HIGH 75
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr().
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00429 · Published 2026-10-29 · No fix listed CWE-470
Priority HIGH 73
agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metad…
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00399 · Published 2026-05-29 · No fix listed CWE-89
Priority HIGH 70
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00314 · Published 2026-10-12 · No fix listed CWE-913
Priority HIGH 70
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-10-12 · No fix listed CWE-287
Priority MEDIUM 57
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00272 · Published 2026-10-12 · No fix listed CWE-250
Priority MEDIUM 57
A vulnerability was found in agno-agi agno up to 3.0.6.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00237 · Published 2026-10-12 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01451 · Published 2025-08-06 · No fix listed CWE-77
Priority MEDIUM 56
A vulnerability was determined in agno-agi agno up to 3.0.9.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.01068 · Published 2026-10-12 · Fixed in 3.0.10 CWE-77
Priority MEDIUM 41
Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_…
CVSS 4.0 HIGH 8.5· Adjacent network · No auth · User interaction · EPSS 0.01256 · Published 2026-08-19 · No fix listed CWE-22
Priority LOW 30
Agno is a multi-agent framework, runtime and control plane.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00161 · Published 2025-10-31 · Fixed in 2.2.2 CWE-362
Open these records in search → All records by CVSS severity
Critical1 High3 Medium6 Low0 No CVSS0