Vulnerability in Agno-Agi Agno
CVE-2026-119050
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make the agent call pandas.read_pickle on attacker-controlled paths for code execution, or call other readers to read local files.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- github.com/agno-agi/agno/issues/8699 (issue-tracking)
- github.com/agno-agi/agno (product)
- github.com/agno-agi/agno/blob/d9ab0a758286142e7d998ef313ee7504d7fd9453/libs/agn… (technical-description)
- github.com/agno-agi/agno/blob/d9ab0a758286142e7d998ef313ee7504d7fd9453/libs/agn… (technical-description)
- www.vulncheck.com/advisories/agno-through-3.1.11-code-execution-via-pandastools… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-119050?
- CVE-2026-119050 is a high-severity vulnerability in Agno-Agi Agno, classified under Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection). CVSS score: 8.1/10. Published 2026-10-29.
- How severe is CVE-2026-119050?
- High severity. CVSS v3 base score is 8.1 out of 10.