CVE-2026-108816

6.3Medium

Published 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

6.3Medium

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-74, CWE-94

Impact

Authenticated remote attackers can execute arbitrary code on systems running the service. They only need access to trigger the run_python_code function with a malicious payload.

Root cause

The run_python_code function in PythonTools unsafely evaluates user-controlled input passed via the code argument.

Affected systems

agno-agi agno up to 3.0.6

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Fix & remediation

No fixed version is currently available. Disable or restrict access to the PythonTools component and its run_python_code functionality in your application.

shell

$ pip show agno

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-108816