Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution
    component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter
    passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code
    execution. (CVE-2026-35002)

ID	Name	Product	Family	Type	Severity
477569	SCA: security update for agno (GHSA-m4w4-3r8h-jw98)	Tenable Cloud Security	SCA Checks	Local	critical
477569	SCA: security update for agno (GHSA-m4w4-3r8h-jw98)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
439849	SCA: security update for agno (GHSA-77rh-m34w-rv36)	Tenable Cloud Security	SCA Checks	Local	critical
439849	SCA: security update for agno (GHSA-77rh-m34w-rv36)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2026-35002

critical

Tenable Plugins

critical

critical

critical

critical