CVE-2026-108820

6.3Medium

Published 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

6.3Medium

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-250

Impact

Authenticated remote users can execute actions with elevated, unnecessary privileges via the team delegation feature. Public exploit code is already available.

Root cause

The member_agent.run function in libs/agno/agno/team/_default_tools.py handles delegation without properly scoping privileges or requiring confirmation.

Affected systems

agno-agi agno up to 3.0.6 and 3.1.1

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Fix & remediation

No official release is published yet; apply pull request #10124 or avoid using the Delegation Feature in team agents until an update is tagged.

shell

$ pip show agno

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-108820