Vulnerability · Published Aug 19, 2026 · Assigned by VulnCheck

CVE-2026-76832Agno PythonTools Path Traversal via joinpath file_name argument

High 8.8

In plain English

A high-severity path traversal in Agno from Agno AGI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)1.3%top 30.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_name argument passed to read_file, save_to_file, or run_python_file tool actions. Attackers can inject traversal sequences such as '../../../../../../etc/passwd' through direct tool invocation or via prompt injection embedded in agent-processed content to escape the intended base_dir boundary and achieve arbitrary file read, arbitrary file write, or arbitrary Python code execution within the process user's authority.

Affected products (as reported)

Vendor	Product	Versions
Agno AGI	Agno	0 – through 710d7e7

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

GitHub Repository product
Patch Commit patch
https://www.vulncheck.com/advisories/agno-pythontools-path-traversal-via-joinpath-file-name-argument third-party-advisory