CVE-2026-35002: Agno is vulnerable to Eval Injection
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the fieldtype parameter passed to eval(). Attackers can influence the fieldtype value in a FunctionCall to achieve remote code execution.
Published Apr 2, 2026 · Updated Apr 4, 2026
Affected packages
agno
- Ecosystem
- PyPI
- Affected
- < 2.3.24
- Fixed in
- 2.3.24
- Check
pip show agno
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-35002
- https://github.com/agno-agi/agno/commit/cbf675521d4d2281925a051784a3b94172e56416
- https://github.com/agno-agi/agno/releases/tag/v2.3.24
- https://www.vulncheck.com/advisories/agno-field-type-eval-injection-arbitrary-code-execution
- https://github.com/advisories/GHSA-77rh-m34w-rv36
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology