CVE-2026-108819: agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments of agno-agi agno up to versions 3.0.6 and 3.1.1 are identified as affected. The issue is in the Agent Orchestration Layer's exec function.
What does an attacker need to exploit this issue?
The vulnerability is remotely exploitable and requires manipulation of the code argument passed to exec. The supplied data indicates network access, low attack complexity, no privileges, and no user interaction are required.
Is there a fix available?
A pull request intended to fix the issue is awaiting acceptance. No accepted patch or fixed release is identified in the provided data.
How urgent is mitigation?
The issue is rated high severity with a 7.3 score, and a public exploit has been released. This increases the likelihood that affected deployments may be targeted.