Dashboard / CVE-2026-108817

CVE-2026-108817

LOW
INFO Priority: 0.02 BB Relevance: 44/100
Published: 2026-10-12 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Passive
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can resolve this issue. Patch name: ed64fab5be63d2b15faddc2ef7c733176daa14aa. You should upgrade the affected component.

Weakness Classification (2)

Affected Software (10)

VendorProductVersion
agno-agi agno 3.0.0
agno-agi agno 3.0.1
agno-agi agno 3.0.2
agno-agi agno 3.0.3
agno-agi agno 3.0.4
agno-agi agno 3.0.5
agno-agi agno 3.0.6
agno-agi agno 3.0.7
agno-agi agno 3.0.8
agno-agi agno 3.0.9

References & Advisories (12)

https://vuldb.com/vuln/416594
vdb-entry technical-description
https://vuldb.com/submit/964160
third-party-advisory
https://vuldb.com/submit/964161
third-party-advisory
https://vuldb.com/vuln/416594/cti
signature permissions-required

Bug Bounty Relevance

44 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

2.0 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

1.07%
Raw Score 0.010680
Percentile 64.9%
Date 2026-11-05

EPSS Trend

2026-11-05
0.01068
2026-11-04
0.01068
2026-11-03
0.01068
2026-11-02
0.01068

Intelligence Sources

mitre ref →
nvd ref →

External Links