| Título | Agno AGI Agno 2.7.3 CWE-306 Missing Authentication |
|---|
| Descrição | AgentOS, the runtime component of agno, ships with authentication disabled by default. When an operator enables the A2A interface -- a2a_interface=True, the framework's documented cross-agent interoperability deployment, shown without any authentication configuration in the shipped cookbook -- the A2A protocol endpoints are served with no authentication: any network client can discover the registered agents (GET /a2a/agents/{id}/.well-known/agent-card.json) and remotely invoke them (POST /a2a/agents/{id}/v1/message:send and /v1/message:stream for agents, teams, and workflows alike, plus tasks:get / tasks:cancel for agents and teams). When the invoked agent exposes code-executing tools, this escalates to unauthenticated remote code execution.
Affected: agno >= 2.1.2, <= 3.0.6. Patched versions: None.
Reported to the vendor: https://github.com/agno-agi/agno/issues/10052. |
|---|
| Fonte | ⚠️ https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agentos-a2a-no-authentication-by-default.md |
|---|
| Utilizador | Ybyu (UID 101038) |
|---|
| Submissão | 08/09/2026 10h13 (há 2 meses) |
|---|
| Moderação | 11/10/2026 12h42 (1 month later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 416595 [agno-agi agno até 2.7.3/3.0.6 auth.py get_authentication_dependency security_key Autenticação fraca] |
|---|
| Pontos | 0 |
|---|