AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
LLM frameworks · Agno (open source)

Agno

Open-source Python framework for building AI agents and multi-agent teams with built-in tools, memory and knowledge.

1Advisories
0critical
1high
0medium
2026-10-29Latest
Timeline · advisories per quarter
12026 Q4
Named in sources

Reported for Agno

01. highCode executionNew this weekCVE-2026-119050: Agno PandasTools lets a prompt-injected agent call any pandas function, including read_pickle for code execution, still unfixedAgno's PandasTools toolkit calls getattr on pandas with whatever function name the model chooses, so prompt injection can make an agent call read_pickle (which runs code when it loads a malicious pickle) or read local files. NVD lists Agno through 3.1.11 as affected, and the GitHub issue is still open with no fixed release, so turn these tools off for agents that see untrusted content. Agno 2026-10-29
The weekly email

One email a week. Only what changed.

Every new security hole in AI coding tools, MCP servers, app builders and the stacks they generate (Next.js, Supabase, Node, PHP), each with how to check your app and the fix. No roundups of things you already read.

Free, one email a week. Read the latest issue first if you like. One-click unsubscribe in every email. We never sell or share addresses.