agno-agi agno up to 3.0.9 CodingTools coding.py agno.CodingTools.run_shell command os command injection

Summaryinfo

A vulnerability labeled as problematic has been found in agno-agi agno up to 3.0.9. This affects the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. Such manipulation of the argument command leads to os command injection. This vulnerability is traded as CVE-2026-108817. The attack may be launched remotely. Furthermore, there is an exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. The manipulation of the argument command with an unknown input leads to a os command injection vulnerability. Using CWE to declare the problem leads to CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability.

The advisory is available at github.com. This vulnerability is handled as CVE-2026-108817. The exploitation is known to be easy. The attack may be launched remotely. Successful exploitation requires user interaction by the victim. Technical details as well as a public exploit are known. This vulnerability is assigned to T1202 by the MITRE ATT&CK project.

The exploit is available at github.com. It is declared as proof-of-concept.

Upgrading to version 3.0.10 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch ed64fab5be63d2b15faddc2ef7c733176daa14aa is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• agno-agi

Name

• agno

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8
• 3.0.9

License

• open-source

Website

• Product: https://github.com/Agno-agi/Agno/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #964160: Agno AGI Agno 2.7.3 CWE-78 OS Command Injection (by Ybyu)

Duplicate

• Submit #XXXXXX: Xxxx Xxx Xxxx X.x.x Xxx-xx Xxxxxxxx Xxxxxxxxx (by Ybyu)

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion