CVE-2026-108817
agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can resolve this issue. Patch name: ed64fab5be63d2b15faddc2ef7c733176daa14aa. You should upgrade the affected component.
| CWE | CWE-78 CWE-77 |
| Vendor | agno-agi |
| Product | agno |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for agno-agi agno
Be the first to know when new medium vulnerabilities affecting agno-agi agno are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
agno-agi / agno
3.0.0 3.0.1 3.0.2 3.0.3 3.0.4 3.0.5 3.0.6 3.0.7 3.0.8 3.0.9
References
vuldb.com: https://vuldb.com/vuln/416594 vuldb.com: https://vuldb.com/vuln/416594/cti vuldb.com: https://vuldb.com/cve/CVE-2026-108817 vuldb.com: https://vuldb.com/submit/964160 vuldb.com: https://vuldb.com/submit/964161 github.com: https://github.com/Agno-agi/Agno/issues/10048 github.com: https://github.com/agno-agi/agno/pull/10210 github.com: https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-codingtools-run-shell-disallowlist-bypass-command-execution.md github.com: https://github.com/agno-agi/agno/commit/ed64fab5be63d2b15faddc2ef7c733176daa14aa github.com: https://github.com/agno-agi/agno/releases/tag/v3.0.10 github.com: https://github.com/Agno-agi/Agno/
Credits
🔍 Ybyu (VulDB User)