1 matches found
CVE-2026-10105: Improper Neutralization of Special Elements used in an SQL Command
agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the deletebymetadata method. Attackers can exploit the unsafe f-string interpolation in...
8.7CVSS6AI score0.00319EPSS
SaveExploits0References2
20