Tools AI Risk Radar ai-incident-0222
Incident record
Agno orchestration can execute attacker-supplied code
- Severity
- High
- Status
- Research
- Type
- Infra Vuln
- Target
- Agno agent orchestration
- Actor
- researcher
- CVE
- CVE-2026-108819
What happened
The researcher reports that dynamically managed code can reach an execution path in the agent orchestration layer. Exposure depends on the application supplying attacker-controlled content to that path.
The original issue opened on 8 September; the CNA published CVE-2026-108819 on 12 October with CVSS 3.1 score 7.3. Proposed fix PR10523 remained open and unmerged on 13 October.
Sources
- Original advisory or disclosuregithub.com/Agno-agi/Agno/issues/10053
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-108819
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026