CVE-2026-108817

The agno-agi agno library (versions up to 3.0.9 ) is vulnerable to OS command injection via the agno.CodingTools.run_shell function located in libs/agno/agno/tools/coding.py. The root cause is the improper manipulation of the command argument, which allows an attacker to initiate the attack remot...