VulnSocial

CVE-2026-119050

LOWCVSS 9.2 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make the agent call pandas.read_pickle on attacker-controlled paths for code execution, or call other readers to read local files.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-470

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-30: 110-30
Full discourse1 post
  • Basant Pandey@Basant_Pandey

    Agent bug worth a look: @agno_agi PandasTools (through 3.1.11) passes a model-chosen function name to getattr(). Prompt injection can make it call read_pickle on an attacker path, which is code execution. CVE-2026-119050, 9.2. Lesson I keep relearning: tools need allowlists.

    4002062
    26 followersView on X

Explore more

Back to dashboard