CVE-2026-108820 agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges
Attackers can exploit the delegation feature to execute code with unnecessary privileges, requiring a patch for the agno library.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-108820?
CVE-2026-108820 is a medium-severity vulnerability in agno-agi agno, published on 12 Oct 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
Weakness: CWE-250
Which versions are affected by CVE-2026-108820?
How do I fix CVE-2026-108820?
No fix has been published for CVE-2026-108820 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-108820 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-108820 exists.
Sources
Also known as GHSA-rh58-m2cv-88pv.