Description
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| agno-agi | agno | 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.1.0, 3.1.1 | — |
References
- VDB-416597 | agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges vdb-entry technical-description
- VDB-416597 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-108820 | CVE Analysis and Report third-party-advisory
- Submit #964165 | Agno AGI Agno 2.7.3 CWE-250 Execution with Unnecessary Privileges third-party-advisory
- https://github.com/Agno-agi/Agno/issues/10054 issue-tracking
- https://github.com/agno-agi/agno/pull/10124 issue-tracking patch
- https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-team-delegation-without-scoping-or-confirmation.md exploit
- https://github.com/Agno-agi/Agno/ product