| Título | Agno AGI Agno 2.7.3 CWE-306 Missing Authentication |
|---|
| Descripción | AgentOS, the runtime component of agno, ships with authentication disabled by default. When an operator enables the A2A interface -- a2a_interface=True, the framework's documented cross-agent interoperability deployment, shown without any authentication configuration in the shipped cookbook -- the A2A protocol endpoints are served with no authentication: any network client can discover the registered agents (GET /a2a/agents/{id}/.well-known/agent-card.json) and remotely invoke them (POST /a2a/agents/{id}/v1/message:send and /v1/message:stream for agents, teams, and workflows alike, plus tasks:get / tasks:cancel for agents and teams). When the invoked agent exposes code-executing tools, this escalates to unauthenticated remote code execution.
Affected: agno >= 2.1.2, <= 3.0.6. Patched versions: None.
Reported to the vendor: https://github.com/agno-agi/agno/issues/10052. |
|---|
| Fuente | ⚠️ https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agentos-a2a-no-authentication-by-default.md |
|---|
| Usuario | Ybyu (UID 101038) |
|---|
| Sumisión | 2026-09-08 10:13 (hace 2 meses) |
|---|
| Moderación | 2026-10-11 12:42 (1 month later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 416595 [agno-agi agno hasta 2.7.3/3.0.6 auth.py get_authentication_dependency security_key autenticación débil] |
|---|
| Puntos | 0 |
|---|