CVE-2026-108816: agno-agi agno PythonTools python.py run_python_code code injection
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function runpythoncode of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Agno deployments using the PythonTools component are affected if they run a vulnerable agno-agi agno version up to 3.0.6 and expose or pass attacker-controlled input to the run_python_code function.
What access does an attacker need to exploit it?
The attack can be launched remotely, but the supplied severity vector indicates low privileges are required. No user interaction is required.
How serious is successful exploitation?
The issue is rated medium severity with a 6.3 CVSS score. The provided vector indicates low impacts to confidentiality, integrity, and availability.
Is there public exploit information?
Yes. The exploit has been made public and could be used, increasing the practical risk for exposed deployments.