CVE-2026-37003

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution RCE via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec, runpy.runpath, and subprocess.run. An unauthenticated attacker can exploi...

CVE-2026-37003

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution RCE via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec, runpy.runpath, and subprocess.run. An unauthenticated attacker can exploi...

CVE-2026-37003

Agno versions up to and including 2.5.8 are vulnerable to Remote Code Execution (RCE) via prompt injection . The issue stems from the PythonTools and ShellTools components, which pass unsanitized, LLM-generated arguments directly to execution sinks such as exec() , runpy.run_path() , and subproce...

CVE-2026-37003

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution RCE via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec, runpy.runpath, and subprocess.run. An unauthenticated attacker can exploi...

PT-2026-82661

Name of the Vulnerable Software and Affected Versions Agno versions prior to 2.5.9 Description Remote Code Execution RCE is possible via prompt injection. The PythonTools and ShellTools components pass unsanitized arguments generated by a Large Language Model LLM directly to execution sinks,...

CVE-2026-37003

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution RCE via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec, runpy.runpath, and subprocess.run. An unauthenticated attacker can exploi...

CVE-2026-37003: Improper Control of Generation of Code

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution RCE via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec, runpy.runpath, and subprocess.run. An unauthenticated attacker can exploi...

EUVD-2026-67272

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution RCE via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec, runpy.runpath, and subprocess.run. An unauthenticated attacker can exploi...