Changes.Watch~ upgrade verdicts ~
Free digest
ExploitedPHP2Shell is now on CISA KEV

critical vulnerability

Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`

Fix availableCritical · CVSS 9.8EPSS 0.84%

Published Oct 27, 2026 · updated Oct 27, 2026

What to do

  1. Upgrade to a fixed version: agno 2.3.24.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIagno513,753 downloads/week

Vulnerable versions
< 2.3.24
Fixed in
2.3.24

Check your project: pip show agno

What changed

  1. Oct 27, 2026

    Published in the GitHub Advisory Database as critical.

Sources

CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

← All critical vulnerabilities