CVE-2026-76832

Received Received - Intake

Path Traversal in Agno's PythonTools

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: VulnCheck

Description

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_name argument passed to read_file, save_to_file, or run_python_file tool actions. Attackers can inject traversal sequences such as '../../../../../../etc/passwd' through direct tool invocation or via prompt injection embedded in agent-processed content to escape the intended base_dir boundary and achieve arbitrary file read, arbitrary file write, or arbitrary Python code execution within the process user's authority.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-19

Generated

2026-08-20

AI Q&A

2026-08-20

EPSS Evaluated

N/A

NVD

CVE-2026-76832

EUVD

EUVD-2026-63135

Affected Vendors & Products

Vendor	Product	Version / Range
agno	python_tools	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal issue in Agno's PythonTools within libs/agno/agno/tools/python.py. It allows attackers to read, write, or execute arbitrary files by using parent-directory sequences like ../../../../../../etc/passwd in the file_name argument of read_file, save_to_file, or run_python_file tool actions. Attackers can exploit this through direct tool invocation or prompt injection in agent-processed content to bypass the intended base_dir boundary.

Detection Guidance

Check for unusual file access patterns or commands involving parent-directory traversal sequences like ../../../../../../ in logs or agent interactions. Monitor for unexpected file reads, writes, or Python code executions in system directories.

Impact Analysis

This vulnerability can lead to severe impacts such as unauthorized file access, modification, or deletion on the affected system. Attackers could read sensitive files like configuration files or passwords, write malicious files to execute arbitrary code, or even gain control over the system depending on the user's permissions.

Compliance Impact

This vulnerability can lead to non-compliance with regulations like GDPR and HIPAA by enabling unauthorized access to sensitive data. GDPR requires protection of personal data, while HIPAA mandates safeguards for protected health information. Exploitation could result in data breaches, leading to legal penalties and reputational damage.

Mitigation Strategies

Update Agno's PythonTools to the latest version. Restrict file access permissions to the intended base directory. Implement input validation to block traversal sequences in file_name arguments. Review and audit agent-processed content for prompt injection attempts.

Hi! I’m here to help you understand CVE-2026-76832. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70