PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-108818 agno-agi CVE debrief

A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack may be launched remotely. Defenders should verify the authentication mechanism and assess exposure in their environment. The project was informed of the problem early through an issue report but has not responded yet. Verify the vendor advisory for affected versions and update plans.

Vendor
agno-agi
Product
agno
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Defenders responsible for agno-agi agno deployments should verify the authentication mechanism and assess exposure in their environment. This includes reviewing the vendor advisory for affected versions and updating plans accordingly. Security teams should track exceptions, retest remediated assets, and close the item only after evidence is documented.

Why it matters

Defenders should prioritize verifying the authentication mechanism in agno-agi agno versions up to 2.7.3/3.0.6 and assessing exposure in their environment due to the missing authentication vulnerability in the get_authentication_dependency function of auth.py.

  • Verify authentication mechanism in agno-agi agno versions up to 2.7.3/3.0.6
  • Assess exposure in the environment

Technical summary

The vulnerability affects agno-agi agno versions up to 2.7.3/3.0.6. The function get_authentication_dependency in auth.py is vulnerable to missing authentication due to manipulation of the security_key argument. Remote attacks are possible. This issue was reported to the project early but has not been addressed. Defenders should prioritize verifying the authentication mechanism and assessing exposure in their environment. The CVE Program and NVD provide additional context on this vulnerability. Defenders should review official advisories for additional information.

Defensive priority

Defenders should prioritize verifying the authentication mechanism in agno-agi agno versions up to 2.7.3/3.0.6 and assessing exposure in their environment.

Recommended defensive actions

  • Verify the authentication mechanism in agno-agi agno versions up to 2.7.3/3.0.6
  • Assess exposure in the environment
  • Review and update affected versions
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
  • Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
  • Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The vulnerability affects agno-agi agno versions up to 2.7.3/3.0.6. The function get_authentication_dependency in auth.py is vulnerable to missing authentication due to manipulation of the security_key argument. Remote attacks are possible. Evidence is based on CVE Program records and NVD vulnerability details. Defenders should review official advisories for additional information.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-108818 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-108818

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-108818 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-108818

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • agno-agi agno auth.py get_authentication_dependency missing authentication

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108818.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/416595

    Supplemental source - vdb-entry, technical-description

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/416595/cti

    Supplemental source - signature, permissions-required

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/cve/CVE-2026-108818

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/submit/964162

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/submit/964163

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/Agno-agi/Agno/issues/10051

    Supplemental source - issue-tracking

  • Source reference

    Unverified legacy reference

    URL: https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agentos-no-authentication-by-default.md

    Supplemental source - exploit

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.