CVE-2026-37003

Agno (up to and including version 2.5.8 ) is vulnerable to Remote Code Execution via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec(), runpy.run_path(), and subprocess.run(). An unauthenticated attac...