Skip to content
OpenAdvisories

Package · PyPI

agno

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.3
    CVE-2026-10105

    agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()

    agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method. Attackers can exploit the…

    agno-agi agno agno PyPI
  • Critical 9.3
    CVE-2026-35002

    Agno < 2.3.24 field_type Eval Injection Arbitrary Code Execution

    Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the fiel…

    Agno Agno agno PyPI
  • High 7.1
    CVE-2025-64168

    Agno session state overwrites between different sessions/users

    Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and pers…

    agno-agi agno agno PyPI