CVE-2026-119050
agno-agi agno
- agno-agi agno
- Critical
- CVSS 9.2
- No fixed version listed
Summary
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr().
From the CVE record.
Read the original description
CVE record
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make the agent call pandas.read_pickle on attacker-controlled paths for code execution, or call other readers to read local files.
What to do
No fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| agno-agi agno | through 3.1.11 | None listed |
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.2 (v4.0, scored by VulnCheck)
- Weakness
- CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
- Vendor
- agno-agi, agno
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.