Priority HIGH 75
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr().
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00429 · Published 2026-10-29 · No fix listed CWE-470
Priority MEDIUM 57
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00272 · Published 2026-10-12 · No fix listed CWE-250
Priority HIGH 70
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00314 · Published 2026-10-12 · No fix listed CWE-913
Priority HIGH 70
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-10-12 · No fix listed CWE-287
Priority MEDIUM 56
A vulnerability was determined in agno-agi agno up to 3.0.9.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.01068 · Published 2026-10-12 · Fixed in 3.0.10 CWE-77
Priority MEDIUM 57
A vulnerability was found in agno-agi agno up to 3.0.6.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00237 · Published 2026-10-12 · No fix listed CWE-74
Priority MEDIUM 41
Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_…
CVSS 4.0HIGH 8.5· Adjacent network · No auth · User interaction · EPSS 0.01256 · Published 2026-08-19 · No fix listed CWE-22
Priority HIGH 73
agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metad…
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00399 · Published 2026-05-29 · No fix listed CWE-89
Priority LOW 30
Agno is a multi-agent framework, runtime and control plane.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00161 · Published 2025-10-31 · Fixed in 2.2.2 CWE-362
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01451 · Published 2025-08-06 · No fix listed CWE-77
THREATIST.IORead the docs