{"data":{"id":"67b17d83-b9e3-456d-baf6-e71e0fa121bf","title":"CVE-2026-37003: Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection. The PythonTools and…","summary":"Agno up to and including 2.5.8 contains CVE-2026-37003, a remote code execution flaw reached through prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to exec(), runpy.run_path() and subprocess.run(). An unauthenticated attacker can embed malicious instructions in content the agent processes, such as web pages or documents, and gain arbitrary code and OS command execution on the host server.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-37003","publishedAt":"2026-08-27T20:17:41.107Z","cveId":"CVE-2026-37003","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Agno"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Agno RCE via prompt injection in PythonTools and ShellTools","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01321,"epssCheckedAt":"2026-11-05T06:10:14.448Z","kevDateAdded":null,"advisoryAliases":["GHSA-g3w9-2xgv-r24v"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T18:09:00.393Z","patchAvailable":null,"disclosureDate":"2026-08-27T20:17:41.107Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}