CVE-2026-108819
7.3HighPublished 12 Oct 2026 · NVD status: Deferred
7.3High
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Limited impact
- Weakness
- CWE-913
The AI triage for this one isn't ready yet. Check back in a few minutes; the full NVD record is below in the meantime.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Ad · In-content banner
NVD description
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
References
- https://github.com/Agno-agi/Agno/
- https://github.com/Agno-agi/Agno/issues/10053
- https://github.com/agno-agi/agno/pull/10523
- https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agent-orchestration-missing-confirmation-gate-code-execution.md
- https://vuldb.com/cve/CVE-2026-108819
- https://vuldb.com/submit/964164
- https://vuldb.com/vuln/416596
- https://vuldb.com/vuln/416596/cti