CVE-2026-10105Proof of concept (PoC) published · CISA
agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()
CVSS score
8.3
EPSS probability
%0.4
Risk score
0.0
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.5
CVE-2026-76832
Agno PythonTools Path Traversal via joinpath file_name argument
A
Patch verifiedEPSS %1
5.1
CVE-2026-108817
agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection
A
Patch verifiedEPSS %1
6.9
CVE-2026-108818
agno-agi agno auth.py get_authentication_dependency missing authentication
A
Patch status unknownEPSS %1
6.9
CVE-2026-108819
agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources
A
Patch verifiedEPSS %0
5.3
CVE-2026-108816
agno-agi agno PythonTools python.py run_python_code code injection
A
Patch status unknownEPSS %0
5.3
CVE-2026-108820
agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges
A
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-10105"