CVE-2026-35002
Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component. The field_type parameter on a FunctionCall input field was passed to Python's built-in eval(), allowing an attacker who could influence that value to execute arbitrary Python code in the Agno process.
- Agno Agno
- Critical
- CVSS 9.8
- EPSS 0.84%
- Fixed version listed
What to do
Fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| Agno Agno | before 2.3.24 | 2.3.24 |
The CVE record lists 1 range this page cannot state exactly.
Affected packages
| Package | Affected | Fixed in | Advisory |
|---|---|---|---|
| agno (PyPI) | < 2.3.24 | 2.3.24 | GHSA-m4w4-3r8h-jw98 |
Advisories and fixes
- Patch github.com
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.8 (v3.1, scored by GitHub)
- EPSS
- 0.84% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 27, 2026)
- CISA's SSVC decision points
- Exploitation: none. Automatable: yes. Technical impact: total. As of Apr 2, 2026.
- Weakness
- CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
- Vendor
- Agno, Agno
Timeline
- GitHub published advisory GHSA-m4w4-3r8h-jw98 (critical). Fixed in 2.3.24.