These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A weakness in agno-agi agno up to 3.0.6/3.1.1 allows for execution with unnecessary privileges due to a manipulation in the Delegation Feature's member_agent.run function. The attack can be executed remotely and a public exploit is available. However, details on affected versions, exploitation, and remediation require verification from official sources.
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack may be launched remotely. Defenders should verify the authentication mechanism and assess exposure in their environment. The project was informed of the problem early throug [truncated]
A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.10 can res [truncated]
A code injection vulnerability exists in the PythonTools component of agno-agi's agno product, specifically in the `run_python_code` function of `python.py`. This issue allows remote attackers to inject code, with the exploit being publicly available. The affected versions range from 3.0.0 to 3.0.6. The vendor has been informed but has not yet responded.
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issu [truncated]
CVE-2026-76832 is a path traversal vulnerability in Agno's PythonTools, specifically in the libs/agno/agno/tools/python.py file. The vulnerability allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_name argument passed to read_file, save_to_file, or run_python_file tool actions.
A SQL injection vulnerability exists in agno 2.6.5 within the ClickHouse vector database backend. The `delete_by_metadata()` method in `clickhousedb.py` uses unsafe f-string interpolation when constructing SQL queries, allowing attackers to inject arbitrary SQL expressions through malicious metadata keys and values. This vulnerability was disclosed on 2026-05-29 and affects applications using agno's Click [truncated]