agno 2.6.5 is affected by a SQL injection vulnerability (CWE-89) in the ClickHouse vector database backend. The issue is due to unsafe f-string interpolation in the clickhousedb.py file within the delete_by_metadata() method, which processes metadata keys and values without proper neutralization. This allows attackers with limited privileges (PR:L) to inject arbitrary SQL commands remotely (AV:N) without user interaction (UI:N). The vulnerability impacts confidentiality and integrity at a high level and availability at a low level (CVSS 8.3). No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation can allow an attacker to delete all or specific rows in the database or extract sensitive information via error-based or blind SQL injection. This compromises data confidentiality and integrity, with a lesser impact on availability. The attack requires low complexity and limited privileges but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using the vulnerable delete_by_metadata() method with untrusted input. Implement input validation and sanitization as a temporary measure if possible.