SQL Injection

Overview agno is an Agno: a lightweight library for building Multi-Agent Systems Affected versions of this package are vulnerable to SQL Injection via the deletebymetadata function in the clickhouse backend. An attacker can execute unintended SQL commands by supplying malicious metadata keys and...

Race Condition

Overview agno is an Agno: a lightweight library for building Multi-Agent Systems Affected versions of this package are vulnerable to Race Condition in the async method acleanupandstore while passing sessionstate to Agent or Team during run or arun calls. The condition occures when a Team is used...

Command Injection

Overview agno is an Agno: a lightweight library for building Multi-Agent Systems Affected versions of this package are vulnerable to Command Injection via libs/agno/agno/tools/mcp.py when handling the command argument. An attacker can execute arbitrary system commands by supplying crafted input...