Live › vulnerability › GHSA-77rh-m34w-rv36
Go to dashboardAgno versions before 2.3.24 pass the field_type value in a FunctionCall to eval(), so attacker-controlled input is executed as Python. An attacker who can influence that field can run arbitrary code on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 13:31 UTC. All times on this page are UTC.
Teams running Agno versions before 2.3.24 where model output or other untrusted input can reach FunctionCall field_type values. This advisory is withdrawn as a duplicate of GHSA-m4w4-3r8h-jw98, so check that entry for the authoritative details. Systems pinned to 2.3.24 or later are not affected by this flaw.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| agno | pypi | < 2.3.24 | 2.3.24 |
pip show agno and compare it to 2.3.24.2.3.24 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This advisory has been withdrawn because it is a duplicate of GHSA-m4w4-3r8h-jw98. This link is maintained to preserve external references.
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.
This page as .md · .json · in your agent: get_signal("GHSA-77rh-m34w-rv36")
GitHub Advisory Database, CC-BY 4.0. Posts quoted belong to their authors.