CVE-2026-119050

{
  "etk_id": "ETK-2026-2974",
  "cve_id": "CVE-2026-119050",
  "display_id": "CVE-2026-119050",
  "ghsa_id": "GHSA-jq64-vhh4-4hvv",
  "euvd_id": "EUVD-2026-112816",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unsafe pandas function dispatch in Agno PandasTools",
  "summary": "Agno through 3.1.11 is affected by unsafe dynamic function selection in PandasTools. An attacker who can steer an agent with prompt injection may cause the tool to invoke unintended pandas functionality, potentially reading local files or executing code.",
  "mitigation": "Disable or tightly restrict PandasTools for agents that process untrusted prompts, and isolate those agents from sensitive files and execution privileges. No fixed version is recorded; monitor for an upstream update and upgrade promptly when one is available.",
  "vendor": "agno-agi",
  "product": "agno",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.1.11"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "agno",
      "purl": null
    }
  ],
  "cwes": [
    470
  ],
  "cvss_score": 9.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 16.45195755,
  "t0_at": "2026-10-29T13:08:51.517000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-29T13:08:51.517000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T13:08:51.517000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119050"
    }
  }
}