CVE-2026-35002 Agno < 2.3.24 field_type Eval Injection Arbitrary Code Execution
Attackers can execute arbitrary Python code by manipulating the field_type parameter in Agno's model execution component.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-35002?
CVE-2026-35002 is a critical code injection vulnerability in Agno, published on 2 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.
Weakness: CWE-95
Which versions are affected by CVE-2026-35002?
5 open source packages ship an affected version, including agno. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
agno PyPI | All versions | 2.3.24 |
agno PyPI | All versions | 2.3.24 |
agno PyPI | All versions | 2.3.24 |
agno PyPI | All versions | 2.3.24 |
agno PyPI | All versions | 2.3.24 |
Products include Agno Agno.
How do I fix CVE-2026-35002?
Upgrade agno to 2.3.24 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-35002 being exploited?
There is no known exploitation of CVE-2026-35002 in the wild and no public exploit code.
Sources
Also known as GHSA-77rh-m34w-rv36, GHSA-m4w4-3r8h-jw98, PYSEC-2026-256.