Medium severity · published Oct 12, 2026
CVE-2026-108820
agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges
6.3
CVSS
0.3%
EPSS
No
On KEV
Description
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
agno · agno-agi
3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +3 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-108820
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-108820
vdb-entry
https://vuldb.com/vuln/416597
signature
https://vuldb.com/vuln/416597/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-108820
third-party-advisory
https://vuldb.com/submit/964165
issue-tracking
https://github.com/Agno-agi/Agno/issues/10054
issue-tracking
https://github.com/agno-agi/agno/pull/10124
More from agno
8.8
CVE-2026-76832
Agno PythonTools Path Traversal via joinpath file_name argument
8.3
CVE-2026-10105
agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()
8.1
CVE-2026-119050
Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
7.3
CVE-2026-108819
agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources
7.3
CVE-2026-108818
agno-agi agno auth.py get_authentication_dependency missing authentication