Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/02 2:34 p.m.5 views

CVE-2026-35002 Agno < 2.3.24 field_type Eval Injection Arbitrary Code Execution

Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the fieldtype parameter passed to eval. Attackers can influence the fieldtype value in a FunctionCall to achieve...

9.3CVSS6.9AI score0.00842EPSS
SaveExploits0References6
Rows per page
Query Builder