High severity · published Oct 12, 2026
CVE-2026-108819
agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources
7.3
CVSS
0.3%
EPSS
No
On KEV
Description
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
agno · agno-agi
3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +3 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-108819
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-108819
vdb-entry
https://vuldb.com/vuln/416596
signature
https://vuldb.com/vuln/416596/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-108819
third-party-advisory
https://vuldb.com/submit/964164
issue-tracking
https://github.com/Agno-agi/Agno/issues/10053
issue-tracking
https://github.com/agno-agi/agno/pull/10523
More from agno
8.8
CVE-2026-76832
Agno PythonTools Path Traversal via joinpath file_name argument
8.3
CVE-2026-10105
agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()
8.1
CVE-2026-119050
Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
7.3
CVE-2026-108818
agno-agi agno auth.py get_authentication_dependency missing authentication
7.1
CVE-2025-64168
Agno session state overwrites between different sessions/users
