AG
Product
agno
by agno-agi · last CVE Oct 29, 2026
10
CVEs
0
On KEV
8.8
Max CVSS
6
New 30D
Severity mix
Critical 0High 6Medium 4Low 0
Watch

Add agno to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76832
8.8
1%
Aug 19
Agno PythonTools Path Traversal via joinpath file_name argument
Affected: through 710d7e7
CVE-2026-10105
8.3
0%
May 29
agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()
Affected: through 2.6.5; through 26a7439b803c0ccc9a58ee53572d8088a678923f; through a0ec99305e782e68ba26f5966c53ad50b5f40132
CVE-2026-119050
New
8.1–Oct 29
Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
Affected: through 3.1.11
CVE-2026-108819
7.3
0%
Oct 12
agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources
Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +3 more
CVE-2026-108818
7.3
0%
Oct 12
agno-agi agno auth.py get_authentication_dependency missing authentication
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 3.0.0; 3.0.1; +5 more
CVE-2025-64168
7.1
0%
Oct 31
Agno session state overwrites between different sessions/users
Affected: >= 2.0.0, < 2.2.2
Showing 6