CVE-2026-108818 Details
Description
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability exists in the Agno-agi framework, specifically in the AgentOS module, versions 2.0.0 through 3.0.6. The issue arises from the default configuration, which does not enable authentication, leaving all REST endpoints accessible to unauthenticated users. This flaw allows unauthorized access to sensitive management features and session data. The vulnerability can be exploited remotely, and public exploits are available.
No official patch is available yet, but the framework should be configured to require authentication by default, automatically generate security keys when none are provided, and log the generated keys at startup. Alternatively, the default configuration could be changed to bind only to loopback interfaces, preventing external access.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 12, 2026CISA-ADP
Assessed Oct 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Agno-agi/Agno/ | [email protected] | ProductSource CodeVendor |
| https://github.com/Agno-agi/Agno/issues/10051 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/ybyu-ieu/agno-security-advisories/blob/main/advisories/agno-agentos-no-authentication-by-default.md | [email protected] | AdvisoryExploitRemedy |
| https://vuldb.com/cve/CVE-2026-108818 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/964162 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/submit/964163 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/416595 | [email protected] | Content Wall |
| https://vuldb.com/vuln/416595/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| agno-agi agno | >= 2.0.0, <= 3.0.6 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 14, 2026 | CVE Modified | CISA-ADP |
| Oct 12, 2026 | New CVE Received | [email protected] |