Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-119050EUVD-2026-112816

Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB, Metasploit or GitHub
On X
View the cve.now post

Summary

Agno, an agent framework, is affected through its PandasTools component. Attackers can use prompt injection to make the agent run arbitrary pandas functions, which can lead to code execution on the host or reading of local files.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make the agent call pandas.read_pickle on attacker-controlled paths for code execution, or call other readers to read local files.

Affected versions

  • agno-agi agno

    through 3.1.11

References 5

GitHub · agno-agi/agno

vulncheck.com