Tools AI Risk Radar ai-incident-0223
Incident record
Agno delegation can grant a member agent excessive privileges
- Severity
- Medium
- Status
- Research
- Type
- Infra Vuln
- Target
- Agno delegation
- Actor
- researcher
- CVE
- CVE-2026-108820
What happened
A researcher reports that delegated work can run with privileges beyond those intended for the member agent. The boundary depends on the application’s delegation and tool configuration.
The original issue opened on 8 September. The 12 October CNA record gives CVSS 3.1 score 6.3. Proposed fix PR10124 remained open and unmerged on 13 October.
Sources
- Original advisory or disclosuregithub.com/Agno-agi/Agno/issues/10054
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-108820
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026