Quick answers
- Is CVE-2026-119050 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-119050 being exploited in the wild.
- How severe is CVE-2026-119050?
- High severity, with a CVSS score of 8.1, published 29 October 2026.
- Which products and versions are affected?
- Agno through 3.1.11.
- Is there a fix for CVE-2026-119050?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-119050 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-119050?
- Check whether you run Agno at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The PandasTools class uses unsafe reflection via getattr() to dynamically call pandas functions based on model-controlled input (create_using_function and operation parameters). An attacker can inject prompts to make the agent call dangerous functions like pandas.read_pickle on attacker-controlled file paths, leading to arbitrary code execution, or use file readers to exfiltrate local files. No authentication or special privileges are required—only the ability to interact with the agent.
Affected products
- Agno Agno through 3.1.11
Timeline
- 2026-10-29: disclosed