CVE-2026-108818
Deferred Deferred - Pending Action

Authentication Bypass in agno up to 3.0.6

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulDB

Description
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-108818
EUVD
EUVD-2026-97303

Affected Vendors & Products

Showing 11 associated CPEs
Vendor Product Version / Range
agno-agi agno 2.7.0
agno-agi agno 2.7.1
agno-agi agno 2.7.2
agno-agi agno 2.7.3
agno-agi agno 3.0.0
agno-agi agno 3.0.1
agno-agi agno 3.0.2
agno-agi agno 3.0.3
agno-agi agno 3.0.4
agno-agi agno 3.0.5
agno-agi agno 3.0.6

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-108818 is a critical vulnerability in the agno AgentOS framework where authentication is disabled by default. This allows unauthenticated access to all REST endpoints, including sensitive operations like configuration changes and agent execution. The flaw arises because the AuthMiddleware is not installed unless credentials are explicitly set, and per-route checks default to allowing requests when no security key is configured.

Detection Guidance

Check if the /info endpoint returns auth_mode: none by running curl http://<target>:<port>/info. Verify if REST endpoints like /config, /sessions, or /runs are accessible without authentication using curl -X GET http://<target>:<port>/<endpoint>. Inspect agno configuration files for authorization=False and os_security_key=None.

Impact Analysis

Attackers can exploit this to read sensitive data, modify configurations, and execute arbitrary agent runs without authentication. Multi-tenant deployments are especially vulnerable, as all user sessions become accessible to anonymous users. This could lead to data breaches, unauthorized system changes, or service disruption.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection (GDPR, HIPAA) due to unauthorized access to sensitive data. It undermines confidentiality and integrity controls, potentially leading to regulatory penalties for failing to implement adequate security measures.

Mitigation Strategies

Enable authentication by default in agno settings. Set a strong os_security_key and ensure AuthMiddleware is installed. Restrict network access to agno instances until patched. Monitor for unauthorized access attempts or unusual activity in session logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108818. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart