Threat database

CVE-2026-108820 is a medium severity vulnerability in agno-agi agno versions 3.0.0 through 3.1.1. It involves execution with unnecessary privileges in the member_agent.run function within the Delegation Feature component. The vulnerability can be exploited remotely without user interaction. A public exploit exists, but a fix is pending acceptance of a pull request.

CVE-2026-108819 is a medium severity vulnerability in agno-agi agno versions 3.0.0 through 3.1.1. It affects the exec function of the Agent Orchestration Layer component, where manipulation of the argument code leads to dynamically-managed code resources. The vulnerability can be exploited remotely without authentication. Although an exploit is publicly available, a fix is pending acceptance of a pull request.

CVE-2026-108818 is a medium severity vulnerability in agno-agi agno versions 2.7.0 through 2.7.3 and 3.0.0 through 3.0.6. It involves missing authentication due to improper handling of the security_key argument in the get_authentication_dependency function within auth.py. The vulnerability can be exploited remotely without privileges or user interaction. Public exploit code exists, but no vendor response or patch is currently available.

CVE-2026-108816 is a medium severity code injection vulnerability in the agno-agi agno software up to version 3.0.6. The flaw exists in the run_python_code function of the python.py file within the PythonTools component. An attacker can remotely manipulate the code argument to inject and execute arbitrary code. Exploit code has been publicly disclosed, but there is no vendor response or patch available yet.

Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. This has been patched in version 2.2.2.