High severity · published Oct 12, 2026
CVE-2026-108818
agno-agi agno auth.py get_authentication_dependency missing authentication
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
agno · agno-agi
2.7.0; 2.7.1; 2.7.2; 2.7.3; 3.0.0; 3.0.1; +5 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-108818
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-108818
vdb-entry
https://vuldb.com/vuln/416595
signature
https://vuldb.com/vuln/416595/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-108818
third-party-advisory
https://vuldb.com/submit/964162
third-party-advisory
https://vuldb.com/submit/964163
issue-tracking
https://github.com/Agno-agi/Agno/issues/10051
More from agno
8.8
CVE-2026-76832
Agno PythonTools Path Traversal via joinpath file_name argument
8.3
CVE-2026-10105
agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()
8.1
CVE-2026-119050
Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
7.3
CVE-2026-108819
agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources
7.1
CVE-2025-64168
Agno session state overwrites between different sessions/users