CVE-2026-35002 ยท GHSA-m4w4-3r8h-jw98
Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
- Risk score
- 80/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.8%
- Published
- 2 Apr 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component. Attackers can execute arbitrary Python code by manipulating the field_type parameter passed to eval().
- Affected
- {'products': ['Agno'], 'packages': ['agno'], 'versions': ['< 2.3.24']}
- Fix
- Upgrade to version 2.3.24 or later
- Exploitation
- No known exploitation
Why it is Red
- CVSS 9.8 critical
- Remotely exploitable without logging in
- On your watchlist: PyPI
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| agno | pip | < 2.3.24 | 2.3.24 |
References
- https://github.com/advisories/GHSA-m4w4-3r8h-jw98
- https://github.com/agno-agi/agno/security/advisories/GHSA-m4w4-3r8h-jw98
- https://nvd.nist.gov/vuln/detail/CVE-2026-35002
- https://github.com/agno-agi/agno/commit/cbf675521d4d2281925a051784a3b94172e56416
- https://github.com/agno-agi/agno/releases/tag/v2.3.24
- https://github.com/pypa/advisory-database/tree/main/vulns/agno/PYSEC-2026-256.yaml
- https://pypi.org/project/agno
- https://www.vulncheck.com/advisories/agno-field-type-eval-injection-arbitrary-code-execution
- https://github.com/advisories/GHSA-m4w4-3r8h-jw98
Original description
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.
Last activity 27 Oct 2026. Patch Forecast updates every hour.