CVE-2026-108820: agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function memberagent.run in the library libs/agno/agno/team/defaulttools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects agno-agi agno versions up to 3.0.6 and 3.1.1, specifically the Delegation Feature implementation containing member_agent.run in libs/agno/agno/team/_default_tools.py.
What access does an attacker need?
The CVSS vector indicates that exploitation can be performed remotely with low privileges and does not require user interaction. The attack complexity is rated low.
Is public exploit code available?
Yes. The supplied information states that an exploit has been made public and could be used in attacks.
Is a fix available?
A pull request intended to fix the issue exists, but it is awaiting acceptance. The provided data does not identify a released fixed version or a documented workaround.
What is the potential impact?
Successful manipulation can cause execution with unnecessary privileges. The reported CVSS vector indicates low impacts to confidentiality, integrity, and availability.