CVE-2026-108819
agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
| CWE | CWE-913 |
| Vendor | agno-agi |
| Product | agno |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for agno-agi agno
Be the first to know when new high vulnerabilities affecting agno-agi agno are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
agno-agi / agno
3.0.0 3.0.1 3.0.2 3.0.3 3.0.4 3.0.5 3.0.6 3.1.0 3.1.1
References
vuldb.com: https://vuldb.com/vuln/416596 vuldb.com: https://vuldb.com/vuln/416596/cti vuldb.com: https://vuldb.com/cve/CVE-2026-108819 vuldb.com: https://vuldb.com/submit/964164 github.com: https://github.com/Agno-agi/Agno/issues/10053 github.com: https://github.com/agno-agi/agno/pull/10523 github.com: https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agent-orchestration-missing-confirmation-gate-code-execution.md github.com: https://github.com/Agno-agi/Agno/
Credits
🔍 Ybyu (VulDB User) VulDB CNA Team