CVE-2026-35002: Agno Framework Eval Injection Vulnerability

# CVE-2026-35002: Agno Framework Eval Injection Vulnerability

https://gcdradar.vercel.app/incidents/cve-2026-35002-agno-framework-eval-injection-vulnerability · AIR-2026-0548 · closed 2026-04-02

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Patched
- First reported: 2026-04-02
- AI role: Attack on AI
- Products: Agno
- CVE ids: CVE-2026-35002
- CVSS: 9.3

## Summary

Agno versions prior to 2.3.24 contain an eval injection vulnerability that allows attackers to execute arbitrary code via function calls. Users must upgrade to the patched release.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Affected and fixed versions

- Affected: agno < 2.3.24
- Fixed in: agno 2.3.24

## Latest updates

- 2026-10-27: GitHub advisory published (https://github.com/advisories/GHSA-m4w4-3r8h-jw98)
- 2026-04-02: CVE-2026-35002: Agno is vulnerable to Eval Injection (https://github.com/advisories/GHSA-77rh-m34w-rv36)

## Sources

- 2026-04-02 GitHub Advisory Database: CVE-2026-35002: Agno is vulnerable to Eval Injection https://github.com/advisories/GHSA-77rh-m34w-rv36
- 2026-10-27 GitHub Advisory Database: CVE-2026-35002: Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall` https://github.com/advisories/GHSA-m4w4-3r8h-jw98

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.