| タイトル | Agno AGI Agno 2.7.3 CWE-306 Missing Authentication |
|---|
| 説明 | AgentOS, the runtime component of agno, ships with authentication disabled by default. When an operator enables the A2A interface -- a2a_interface=True, the framework's documented cross-agent interoperability deployment, shown without any authentication configuration in the shipped cookbook -- the A2A protocol endpoints are served with no authentication: any network client can discover the registered agents (GET /a2a/agents/{id}/.well-known/agent-card.json) and remotely invoke them (POST /a2a/agents/{id}/v1/message:send and /v1/message:stream for agents, teams, and workflows alike, plus tasks:get / tasks:cancel for agents and teams). When the invoked agent exposes code-executing tools, this escalates to unauthenticated remote code execution.
Affected: agno >= 2.1.2, <= 3.0.6. Patched versions: None.
Reported to the vendor: https://github.com/agno-agi/agno/issues/10052. |
|---|
| ソース | ⚠️ https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agentos-a2a-no-authentication-by-default.md |
|---|
| ユーザー | Ybyu (UID 101038) |
|---|
| 送信 | 2026年09月08日 10:13 (2 月 ago) |
|---|
| モデレーション | 2026年10月11日 12:42 (1 month later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 416595 [agno-agi agno 迄 2.7.3/3.0.6 auth.py get_authentication_dependency security_key 弱い認証] |
|---|
| ポイント | 0 |
|---|