{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aagno-agiagno/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:agno-agi:agno:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-108818"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["agno (\u003c= 2.7.3 / \u003c= 3.0.6)","agno (\u003c= 3.0.6, 3.1.1)"],"_cs_severities":["high"],"_cs_tags":["remote-code-execution","input-validation","dependency-vulnerability"],"_cs_type":"threat","_cs_vendors":["agno-agi"],"content_html":"\u003cp\u003eA remote authentication bypass vulnerability (CVE-2026-108818) exists in the agno-agi agno library, affecting all versions up to 2.7.3 and 3.0.6. The flaw resides within the get_authentication_dependency function located in auth.py. By manipulating the security_key argument passed to this function, an attacker can circumvent authentication mechanisms, potentially gaining unauthorized access to application resources. The vulnerability is publicly exploitable, and the maintainers have not yet addressed the issue. Organizations utilizing the agno library for authentication dependency management should audit their implementations for potential impact.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote attackers to bypass authentication controls, potentially leading to unauthorized access to protected services or data managed by applications integrating the agno library. Given the public availability of the exploit, the risk of active exploitation is elevated for systems exposing affected endpoints to the internet.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePerform an inventory of all internal applications utilizing the agno-agi agno library to determine exposure.\u003c/li\u003e\n\u003cli\u003eImplement compensating controls at the application or API gateway level to validate authentication tokens independently of the agno library until a vendor patch is released.\u003c/li\u003e\n\u003cli\u003eMonitor application logs for anomalous requests involving the security_key parameter if visible in input validation or logging layers.\u003c/li\u003e\n\u003cli\u003eRestrict network access to services utilizing the vulnerable agno function to trusted internal segments where possible.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T11:42:28Z","date_published":"2026-10-12T10:08:07Z","id":"https://feed.craftedsignal.io/briefs/2026-10-agno-auth-bypass/","summary":"The agno-agi agno library is vulnerable to a remote authentication bypass in the get_authentication_dependency function, allowing unauthenticated access via crafted security_key arguments.","title":"Authentication Bypass in agno-agi agno via security_key Manipulation","url":"https://feed.craftedsignal.io/briefs/2026-10-agno-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:agno-Agi:agno:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}