CVE-2026-108817: agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection
A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.runshell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can resolve this issue. Patch name: ed64fab5be63d2b15faddc2ef7c733176daa14aa. You should upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
agno-agi agnoto a version that resolves this vulnerability.Fixed in 3.0.10Patch ed64fab5be63d2b15faddc2ef7c733176daa14aa
Event History
Frequently Asked Questions
Which versions are affected and what version fixes the issue?
agno-agi agno versions up to and including 3.0.9 are affected. Upgrade to version 3.0.10, which includes patch ed64fab5be63d2b15faddc2ef7c733176daa14aa.
What level of access does an attacker need?
The attack can be initiated remotely, but the published severity vector indicates that the attacker needs low privileges and user interaction is required. Successful exploitation can affect confidentiality, integrity, and availability at a low impact level.
Is exploitation theoretical?
No. A public exploit disclosure exists and may be used by attackers.