Low
agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges
Type: advisorySources: OSV
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-108820
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 01:57 UTC · Revision 1
Source evidence
agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges
core-osv · Original sourcePublished 12 Oct 2026, 09:30 UTC
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
osv:CVE-2026-108820
Complete source record
{
"id": "e29d64dba91964acf81dd7e439e20f544634dce1bf35483eb13bb9653b16a2eb",
"url": "https://osv.dev/vulnerability/CVE-2026-108820",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges",
"summary": "A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.",
"evidence": "osv:CVE-2026-108820",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2026-108820",
"aliases": [
"CVE-2026-108820"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/agno-agi/agno",
"type": "GIT",
"events": [
{
"introduced": "474836be8d1c103ce6168f4961c22439f2b575a9"
},
{
"last_affected": "3ca74c272fa5017fae4fab234e988378c8f14c63"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "3.0.0"
},
{
"last_affected": "3.0.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.0.1"
},
{
"last_affected": "3.0.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.0.2"
},
{
"last_affected": "3.0.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.0.3"
},
{
"last_affected": "3.0.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.0.4"
},
{
"last_affected": "3.0.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.0.5"
},
{
"last_affected": "3.0.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.0.6"
},
{
"last_affected": "3.0.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.1.0"
},
{
"last_affected": "3.1.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.1.1"
},
{
"last_affected": "3.1.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0"
},
{
"last_affected": "3.0.6"
}
],
"source": "DESCRIPTION"
}
]
}
}
],
"versions": [
"3.0.0",
"3.0.1",
"3.0.2",
"3.0.3",
"3.0.4",
"3.0.5",
"3.0.6",
"3.1.0",
"3.1.1",
"v3.1.1",
"v3.1.0",
"v3.0.11",
"v3.0.10",
"v3.0.9",
"v3.0.8",
"v3.0.7",
"v3.0.6",
"v3.0.5",
"v3.0.4",
"v3.0.3",
"v3.0.2",
"v3.0.1",
"v3.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-108820.json"
}
}
],
"modified": "2026-10-28T02:30:32.616087156Z",
"provider": "osv",
"references": [
"https://github.com/Agno-agi/Agno/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108820.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-108820",
"https://vuldb.com/cve/CVE-2026-108820",
"https://vuldb.com/submit/964165",
"https://vuldb.com/vuln/416597",
"https://github.com/Agno-agi/Agno/issues/10054",
"https://vuldb.com/vuln/416597/cti",
"https://github.com/agno-agi/agno/pull/10124",
"https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-team-delegation-without-scoping-or-confirmation.md"
],
"provider_metadata": {
"cwe_ids": [
"CWE-250"
],
"cna_assigner": "VulDB",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108820.json"
}
},
"related_cves": [
{
"value": "CVE-2026-108820",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 499508,
"published_at": "2026-10-12T09:30:16.221+00:00"
}