CVE-2026-108816: Code Injection in agno-agi agno

This vulnerability exists in agno-agi agno versions 3.0.0 through 3.0.6 in the run_python_code function of the python.py file within the PythonTools component. The flaw allows remote attackers to perform code injection by manipulating the input argument 'code'. The vulnerability was responsibly disclosed to the project, but no official fix or patch has been released. Public exploit code is available, increasing the risk of potential exploitation. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low to limited impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability allows remote attackers to inject and execute arbitrary code within the affected application context. This can lead to unauthorized code execution, potentially compromising the affected system. However, the impact is rated medium due to the low to limited impact on confidentiality, integrity, and availability as per the CVSS vector.

No official patch or fix has been released by the vendor as of the current information. Since the project has not responded to the issue report, users should consider applying workarounds such as disabling or restricting access to the vulnerable function if possible. Monitor vendor channels for any future updates or patches. Avoid exposing the vulnerable component to untrusted networks until a fix is available.