CVE-2026-108819 MEDIUM

CVE-2026-108819: agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources

Vendor Agno-Agi
Product agno
Weakness CWE-913
Published October 12, 2026
Last update October 12, 2026

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

Key dates

02Disclosure timeline

October 12, 2026 CVE published