CVE-2026-108819: Dynamically-Managed Code Resources in agno-agi agno

This vulnerability in agno-agi agno up to versions 3.0.6 and 3.1.1 involves the exec function within the Agent Orchestration Layer component. By manipulating the argument code passed to this function, an attacker can cause dynamically-managed code resources to be created or altered. The vulnerability is remotely exploitable without authentication. Although an exploit is publicly available, the patch addressing this issue is not yet merged and accepted.

Successful exploitation allows remote attackers to manipulate dynamically-managed code resources via the exec function, potentially leading to unauthorized code execution or other impacts related to code resource management. The CVSS 4.0 score of 6.9 indicates a medium severity with network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts.

A fix for this vulnerability has been developed and submitted as a pull request but is not yet accepted or officially released. Until the patch is integrated, users should monitor the vendor's repository for the acceptance of the fix and apply it promptly once available. No official workaround or temporary fix is currently documented.