agno-agi has 6 CVEs on record. Disclosure cadence is accelerating: 5 in the last 90 days against 1 in the 90 before. The busiest recent month was October 2026 with 5. The median CVSS is 6.8 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 5 prev 1
Worst active — by depth score
CVE-2026-10105High· 8.3agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method58CVE-2026-108819High· 7.3A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.152CVE-2026-108818High· 7.3A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.652CVE-2026-108817Medium· 5.5A vulnerability was determined in agno-agi agno up to 3.0.942CVE-2026-108820Medium· 6.3A weakness has been identified in agno-agi agno up to 3.0.6/3.1.135
agno-agi vulnerabilities
CVEs affecting agno-agi, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-108820Medium· 6.3A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can le…
CVE-2026-108819High· 7.3PoCA security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-manage…
CVE-2026-108818High· 7.3PoCA vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack ma…
CVE-2026-108817Medium· 5.5PoCA vulnerability was determined in agno-agi agno up to 3.0.9
A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument …
CVE-2026-108816Medium· 6.3A vulnerability was found in agno-agi agno up to 3.0.6
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. T…
CVE-2026-10105High· 8.3PoCagno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method
agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method. Att…