Skip to content
OpenAdvisories

Package · PyPI

agno

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-10105

    agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()

    agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method. Attackers can exploit the…

    agno-agi agno agno PyPI
  • High 7.1
    CVE-2025-64168

    Agno session state overwrites between different sessions/users

    Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and pers…

    agno-agi agno agno PyPI