| Titel | Agno AGI Agno 2.7.3 CWE-306 Missing Authentication |
|---|
| Beschreibung | AgentOS, the runtime component of agno, ships with authentication disabled by default. When an operator enables the A2A interface -- a2a_interface=True, the framework's documented cross-agent interoperability deployment, shown without any authentication configuration in the shipped cookbook -- the A2A protocol endpoints are served with no authentication: any network client can discover the registered agents (GET /a2a/agents/{id}/.well-known/agent-card.json) and remotely invoke them (POST /a2a/agents/{id}/v1/message:send and /v1/message:stream for agents, teams, and workflows alike, plus tasks:get / tasks:cancel for agents and teams). When the invoked agent exposes code-executing tools, this escalates to unauthenticated remote code execution.
Affected: agno >= 2.1.2, <= 3.0.6. Patched versions: None.
Reported to the vendor: https://github.com/agno-agi/agno/issues/10052. |
|---|
| Quelle | ⚠️ https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agentos-a2a-no-authentication-by-default.md |
|---|
| Benutzer | Ybyu (UID 101038) |
|---|
| Einreichung | 08.09.2026 10:13 (vor 2 Monaten) |
|---|
| Moderieren | 11.10.2026 12:42 (1 month later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 416595 [agno-agi agno bis 2.7.3/3.0.6 auth.py get_authentication_dependency security_key schwache Authentisierung] |
|---|
| Punkte | 0 |
|---|