CVE-2026-10105: agno contains a SQL injection vulnerability
agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the deletebymetadata() method.
Published May 29, 2026 · Updated Jul 2, 2026
Affected packages
agno
- Ecosystem
- PyPI
- Affected
- <= 2.6.5
- Fixed in
- No patched version yet
- Check
pip show agno
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method. Attackers can exploit the unsafe f-string interpolation in clickhousedb.py to delete all rows, target specific rows, or extract information through error-based or blind SQL injection techniques.
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-10105
- https://github.com/agno-agi/agno/issues/7866
- https://github.com/agno-agi/agno/pull/7883
- https://github.com/agno-agi/agno/pull/7883/changes/26a7439b803c0ccc9a58ee53572d8088a678923f
- https://github.com/agno-agi/agno/pull/7883/changes/a0ec99305e782e68ba26f5966c53ad50b5f40132
- https://www.vulncheck.com/advisories/agno-sql-injection-via-clickhouse-delete-by-metadata
- https://github.com/advisories/GHSA-82m5-3pcp-hccq
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology