CVE-2026-119050 Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
CriticalCVSS 9.2
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make the agent call pandas.read_pickle on attacker-controlled paths for code execution, or call other readers to read local files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi agno | <= 3.1.11 | No fix listed |
References
- GitHub Issue #8699 exploit issue-tracking
- github.com product
- github.com technical-description
- VulnCheck Advisory: Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection third-party-advisory