Description
A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can resolve this issue. Patch name: ed64fab5be63d2b15faddc2ef7c733176daa14aa. You should upgrade the affected component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| agno-agi | agno | 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9 | 3.0.10 |
References
- VDB-416594 | agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection vdb-entry technical-description
- VDB-416594 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-108817 | CVE Analysis and Report third-party-advisory
- Submit #964160 | Agno AGI Agno 2.7.3 CWE-78 OS Command Injection third-party-advisory
- Submit #964161 | Agno AGI Agno 2.7.3 CWE-88 Argument Injection (Duplicate) third-party-advisory
- https://github.com/agno-agi/agno/issues/7103 issue-tracking
- https://github.com/agno-agi/agno/pull/10210 issue-tracking patch
- https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-codingtools-run-shell-disallowlist-bypass-command-execution.md exploit
- https://github.com/agno-agi/agno/commit/ed64fab5be63d2b15faddc2ef7c733176daa14aa patch
- https://github.com/agno-agi/agno/releases/tag/v3.0.10 patch
- https://github.com/agno-agi/agno/pull/7102 issue-tracking patch
- https://github.com/agno-agi/agno/ product