| शीर्षक | Agno AGI Agno 2.7.3 CWE-88 Argument Injection |
|---|
| विवरण | An attacker who can influence a command string passed to CodingTools.run_shell() -- by calling the library directly, or through an agent whose toolset registers run_shell -- escapes the restrict_to_base_dir sandbox and writes arbitrary files (and executes arbitrary commands) with the privileges of the agno process. CodingTools._check_command() runs every command with subprocess.run(..., shell=True) after a token-level safety check that unconditionally skips every flag token (if token.startswith("-"): continue), so an allowlisted interpreter such as python combined with the skipped -c flag carries an out-of-base write that is not caught by the path-boundary check.
Affected: agno <= 3.0.6. Patched versions: None.
Reported to the vendor: https://github.com/agno-agi/agno/issues/10050. |
|---|
| स्रोत | ⚠️ https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-codingtools-run-shell-argument-injection-base-dir-escape.md |
|---|
| उपयोगकर्ता | Ybyu (UID 101038) |
|---|
| सबमिशन | 08/09/2026 10:12 AM (2 महीनों पहले) |
|---|
| संयम | 11/10/2026 12:41 PM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 416594 [agno-agi agno तक 3.0.9 CodingTools coding.py agno.CodingTools.run_shell command अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|