CVE-2026-108817
A vulnerability was determined in agno-agi agno up to 3.0.9
- Risk score
- 46/100
- CVSS
- 5.5 v3.1
- Exploit chance (30 days)
- 1.1%
- Published
- 12 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exp…
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 5.5 medium
References
- https://github.com/Agno-agi/Agno/
- https://github.com/Agno-agi/Agno/issues/10048
- https://github.com/agno-agi/agno/commit/ed64fab5be63d2b15faddc2ef7c733176daa14aa
- https://github.com/agno-agi/agno/pull/10210
- https://github.com/agno-agi/agno/releases/tag/v3.0.10
- https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-codingtools-run-shell-disallowlist-bypass-command-execution.md
- https://vuldb.com/cve/CVE-2026-108817
- https://vuldb.com/submit/964160
- https://vuldb.com/submit/964161
- https://vuldb.com/vuln/416594
Original description
A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can resolve this issue. Patch name: ed64fab5be63d2b15faddc2ef7c733176daa14aa. You should upgrade the affected component.
Last activity 12 Oct 2026. Patch Forecast updates every hour.