Lucene search
+L

7 matches found

Cvelist
Cvelist
added 2026/05/29 4:18 p.m.49 views

CVE-2026-10105 agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the deletebymetadata method. Attackers can exploit the unsafe f-string interpolation in...

8.7CVSS0.00319EPSS
SaveExploits0References5
Rows per page
Query Builder