Skip to main content

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/agno-agi/Agno

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-108820 is a medium severity vulnerability in agno-agi agno versions 3.0.0 through 3.1.1. It involves execution with unnecessary privileges in the member_agent.run function within the Delegation Feature component. The vulnerability can be exploited remotely without user interaction. A public exploit exists, but the fix is pending acceptance of a pull request.

Join the discussion

CVE-2026-108819 is a medium severity vulnerability in agno-agi agno versions 3.0.0 through 3.1.1. It affects the exec function of the Agent Orchestration Layer, where manipulation of the argument code can lead to dynamically-managed code resources. Remote exploitation is possible, and a public exploit has been released. A fix has been proposed but is pending acceptance.

Join the discussion
0

CVE-2026-108818 is a medium severity vulnerability in agno-agi agno up to versions 2.7.3 and 3.0.6. It involves missing authentication in the get_authentication_dependency function within auth.py due to manipulation of the security_key argument. The vulnerability can be exploited remotely and public exploit code is available. The vendor has been informed but has not yet responded or issued a patch.

Join the discussion
0

CVE-2026-108816 is a code injection vulnerability in the agno-agi agno software up to version 3.0.6. It affects the run_python_code function in the python.py file of the PythonTools component. The vulnerability allows remote attackers to inject code by manipulating the code argument. The issue was reported early to the project, but no response or fix has been provided yet. Exploit code has been made public, though no known exploitation in the wild has been confirmed. The CVSS 4.0 base score is 5.3, indicating a medium severity level.

Join the discussion

Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. This has been patched in version 2.2.2.

Join the discussion

Showing 1 to 5 of 5 results

Filters:Package: pkg:github/agno-agi/Agno
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses