CVE-2026-108819: agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-12 · updated 2026-10-13
Weakness: CWE-913

Description

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

Affected products

agno-agi agno: 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5 (+3)

References

https://github.com/Agno-agi/Agno/
https://github.com/Agno-agi/Agno/issues/10053
https://github.com/agno-agi/agno/pull/10523
https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agent-orchestration-missing-confirmation-gate-code-execution.md
https://vuldb.com/cve/CVE-2026-108819
https://vuldb.com/submit/964164
https://vuldb.com/vuln/416596
https://vuldb.com/vuln/416596/cti

Get alerted when CVE-2026-108819 or the next vulnerability affects your stack