Vulnerabilities (CVE)

Filtered by vendor Agno Subscribe
Filtered by product Agno
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-35002 1 Agno 1 Agno 2026-04-16 N/A 9.8 CRITICAL
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.