Unsafe Reflection Vulnerability in Agno Product by Agno AGI
CVE-2026-119050

9.2CRITICAL

Key Information:

Vendor

Agno-agi

Status
Agno
Vendor
CVE Published:
29 October 2026

What is CVE-2026-119050?

The Agno product through version 3.1.11 contains an unsafe reflection vulnerability in its PandasTools. This vulnerability allows attackers to invoke arbitrary functions from the Pandas library by leveraging model-controlled input for the 'getattr()' function. Utilizing prompt injection techniques, an attacker may compel the software to execute 'pandas.read_pickle' with paths that they control, potentially leading to unauthorized code execution and data exposure. This flaw can also allow attackers to read local files using alternate Pandas readers, significantly increasing the risk of remote code execution.

Affected Version(s)

agno 0 <= 3.1.11

References

https://github.com/agno-agi/agno/issues/8699
issue-tracking
https://github.com/agno-agi/agno
product
https://github.com/agno-agi/agno/blob/d9ab0a758286142e7d9...
technical-description

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

bogdancherniy11-sudo
mosafariuk
.