| Title | Agno AGI Agno 2.7.3 CWE-306 Missing Authentication |
|---|
| Description | AgentOS, the runtime component of agno, ships with authentication disabled by default. When an operator enables the A2A interface -- a2a_interface=True, the framework's documented cross-agent interoperability deployment, shown without any authentication configuration in the shipped cookbook -- the A2A protocol endpoints are served with no authentication: any network client can discover the registered agents (GET /a2a/agents/{id}/.well-known/agent-card.json) and remotely invoke them (POST /a2a/agents/{id}/v1/message:send and /v1/message:stream for agents, teams, and workflows alike, plus tasks:get / tasks:cancel for agents and teams). When the invoked agent exposes code-executing tools, this escalates to unauthenticated remote code execution.
Affected: agno >= 2.1.2, <= 3.0.6. Patched versions: None.
Reported to the vendor: https://github.com/agno-agi/agno/issues/10052. |
|---|
| Source | ⚠️ https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agentos-a2a-no-authentication-by-default.md |
|---|
| User | Ybyu (UID 101038) |
|---|
| Submission | 09/08/2026 10:13 (2 months ago) |
|---|
| Moderation | 10/11/2026 12:42 (1 month later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 416595 [agno-agi agno up to 2.7.3/3.0.6 auth.py get_authentication_dependency security_key missing authentication] |
|---|
| Points | 0 |
|---|