CVE-2026-37003: n/a
Description
Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec(), runpy.run_path(), and subprocess.run(). An unauthenticated attacker can exploit this by embedding malicious instructions in content processed by the agent (such as web pages or documents), allowing for arbitrary code and OS command execution on the host server.
CVSS v3.1
Score 9.8critical
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-37003 affects Agno up to and including version 2.5.8. The vulnerability arises because the PythonTools and ShellTools components pass unsanitized, LLM-generated input directly to execution sinks such as exec(), runpy.run_path(), and subprocess.run(). This allows an unauthenticated attacker to embed malicious instructions in content processed by the agent (e.g., web pages or documents), leading to arbitrary code execution and OS command execution on the host system.
Potential Impact
Successful exploitation results in full remote code execution with high confidentiality, integrity, and availability impact on the affected host. An unauthenticated attacker can execute arbitrary code and OS commands, potentially leading to complete system compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-04-06T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6a909cefacd9273b49b2cd5c
Added to database: 08/27/2026, 20:24:15 UTC
Last enriched: 09/07/2026, 14:21:00 UTC
Last updated: 10/10/2026, 18:48:19 UTC
Views: 26
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.