Vulnerability Description
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make the agent call pandas.read_pickle on attacker-controlled paths for code execution, or call other readers to read local files.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/agno-agi/agno
- https://github.com/agno-agi/agno/blob/d9ab0a758286142e7d998ef313ee7504d7fd9453/l
- https://github.com/agno-agi/agno/blob/d9ab0a758286142e7d998ef313ee7504d7fd9453/l
- https://github.com/agno-agi/agno/issues/8699
- https://www.vulncheck.com/advisories/agno-through-3.1.11-code-execution-via-pand
FAQ
What is CVE-2026-119050?
CVE-2026-119050 is a vulnerability with a CVSS score of 8.1 (HIGH). Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Att...
How severe is CVE-2026-119050?
CVE-2026-119050 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-119050?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.