CVE-2026-108820

agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges

State: Published
Severity: 5.3 Medium
Published: Oct 12, 2026
Updated: Oct 15, 2026
Reserved: Oct 11, 2026

Description

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C	VulDB
3.0	6.3 Medium	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C	VulDB
2.0	6.5 Medium	AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C	VulDB

Weaknesses

CWE-250 Execution with Unnecessary Privileges

Affected Products

Product	Versions
agnoagno-agi	3.0.0Affected 3.0.1Affected 3.0.2Affected 3.0.3Affected 3.0.4Affected 3.0.5Affected 3.0.6Affected 3.1.0Affected 3.1.1Affected

References

VDB-416597 | agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privilegesvdb-entrytechnical-description
VDB-416597 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
CVE-2026-108820 | CVE Analysis and Reportthird-party-advisory
Submit #964165 | Agno AGI Agno 2.7.3 CWE-250 Execution with Unnecessary Privilegesthird-party-advisory
https://github.com/Agno-agi/Agno/issues/10054issue-tracking
https://github.com/agno-agi/agno/pull/10124issue-trackingpatch
https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-team-delegation-without-scoping-or-confirmation.mdexploit
https://github.com/Agno-agi/Agno/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.