Read the docs

agno-agi

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

agno-agi records in CISA KEV

No agno-agi vulnerabilities are listed in CISA KEV.

Records

10 records

Priority HIGH 75

Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr().

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00429 Published 2026-10-29 No fix listed CWE-470
Priority HIGH 73

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metad…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00399 Published 2026-05-29 No fix listed CWE-89
TI-2026-70908 CVE-2026-108816 · GHSA-jxpq-35pp-m3rc

Code injection in agno-agi agno PythonTools

Priority MEDIUM 57

A vulnerability was found in agno-agi agno up to 3.0.6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00237 Published 2026-10-12 No fix listed CWE-74
Priority MEDIUM 41

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_…

CVSS 4.0HIGH 8.5 Adjacent network No auth User interaction EPSS 0.01256 Published 2026-08-19 No fix listed CWE-22
Open these records in search →