agnoGHSA-77rh-m34w-rv36
Agno is vulnerable to Eval Injection
CriticalCVE-2026-35002 · Published Apr 2, 2026 · updated Jun 29, 2026
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| agno PyPI | < 2.3.24 | 2.3.24 |
Details and references
- CVSS 4.0
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-95
- Also known as
- CVE-2026-35002, PYSEC-2026-256
More agno advisories
All agno| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| May 29 | agno contains a SQL injection vulnerability High8.3May 29 | High8.3 | No fix yet |
| Oct 312025 | Agno session state overwrites between different sessions/usersHigh7.1Oct 31, 2025 | High7.1 | 2.2.2 |