CVE-2026-108819

Published: Ott 12, 2026 Last Modified: Ott 12, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,5
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
HIGH 7,3
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: low
HIGH 7,5
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: partial

Description

AI Translation Available

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

913

Improper Control of Dynamically-Managed Code Resources

Incomplete
Common Consequences
Security Scopes Affected:
Integrity Other
Potential Impacts:
Execute Unauthorized Code Or Commands Varies By Context Alter Execution Logic
Applicable Platforms
Languages: Not Language-Specific, Interpreted
View CWE Details
https://github.com/Agno-agi/Agno/
https://github.com/Agno-agi/Agno/issues/10053
https://github.com/agno-agi/agno/pull/10523
https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-…
https://vuldb.com/cve/CVE-2026-108819
https://vuldb.com/submit/964164
https://vuldb.com/vuln/416596
https://vuldb.com/vuln/416596/cti