CVE-2026-108817

5.5Medium

Published 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

5.5Medium

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: Required
Impact: Limited impact
Weakness: CWE-77, CWE-78

Impact

Authenticated remote attackers can execute arbitrary OS commands if user interaction occurs. Exploits are publicly disclosed.

Root cause

Improper sanitization of the command argument in the agno.CodingTools.run_shell function allows shell command injection.

Affected systems

agno-agi agno up to 3.0.9

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Fix & remediation

Upgrade agno to version 3.0.10 or later; if patching must wait, avoid exposing agno.CodingTools.run_shell to untrusted input.

shell

$ pip install --upgrade 'agno>=3.0.10'

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can resolve this issue. Patch name: ed64fab5be63d2b15faddc2ef7c733176daa14aa. You should upgrade the affected component.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-108817