agnoGHSA-77rh-m34w-rv36

Agno is vulnerable to Eval Injection

CVE-2026-35002 · Published Apr 2, 2026 · updated Jun 29, 2026

Critical

Fix: upgrade to 2.3.24 or later

Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.

Affected versions

Package	Affected	Fixed in
agno PyPI	< 2.3.24	2.3.24

Details and references

CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Severity from: GitHub (reviewed advisory)
Weakness: CWE-95
Also known as: CVE-2026-35002, PYSEC-2026-256

More agno advisories

All agno

Critical 9.8Oct 27

Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`CVE-2026-35002fixed in 2.3.24 High 8.3May 29

agno contains a SQL injection vulnerabilityCVE-2026-10105no fix yet High 7.1Oct 31, 2025

Agno session state overwrites between different sessions/usersCVE-2025-64168fixed in 2.2.2