CVE-2026-108816

agno-agi agno PythonTools python.py run_python_code code injection

State: Published
Severity: 5.3 Medium
Published: Oct 12, 2026
Updated: Oct 15, 2026
Reserved: Oct 11, 2026

Description

A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
3.0	6.3 Medium	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
2.0	6.5 Medium	AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-94 Code Injection
CWE-74 Injection

Affected Products

Product	Versions
agnoagno-agi	3.0.0Affected 3.0.1Affected 3.0.2Affected 3.0.3Affected 3.0.4Affected 3.0.5Affected 3.0.6Affected

References

VDB-416593 | agno-agi agno PythonTools python.py run_python_code code injectionvdb-entrytechnical-description
VDB-416593 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
CVE-2026-108816 | CVE Analysis and Reportthird-party-advisory
Submit #964159 | Agno AGI Agno 2.7.3 CWE-94 Code Injectionthird-party-advisory
https://github.com/Agno-agi/Agno/issues/10047issue-tracking
https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-pythontools-run-python-code-arbitrary-code-execution.mdexploit
https://github.com/Agno-agi/Agno/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.