Skip to content
Threat Feed

Vendor

ClickHouse

1 brief RSS
high advisory

Agno 2.6.5 ClickHouse Backend SQL Injection (CVE-2026-10105)

Agno 2.6.5 is vulnerable to SQL injection in the ClickHouse vector database backend (CVE-2026-10105), enabling attackers to inject arbitrary SQL expressions via malicious metadata in the delete_by_metadata() method, potentially leading to data deletion or information extraction.

agno 2.6.5 sql-injection cve-2026-10105 database
2r 1t 1c