CVE-2026-10105 - agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()

Back Back to CVE browser

HIGH

agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()

Published May 29, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.32%

Description

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method. Attackers can exploit the unsafe f-string interpolation in clickhousedb.py to delete all rows, target specific rows, or extract information through error-based or blind SQL injection techniques.

Affected products

Vendor Agno-Agi Product Agno Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=2.6.5
Vendor Agno-Agi Product Agno Default
n/a
- Version
  0
  Status
  affected
  Constraints
- Version
  0
  Status
  affected
  Constraints

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Agno-Agi

Agno

n/a

Version	Status	Constraints
0	affected	<=2.6.5

Agno-Agi

Agno

n/a

Version	Status	Constraints
0	affected
0	affected

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (7)

https://github.com/advisories/GHSA-82m5-3pcp-hccq
Advisory
https://github.com/agno-agi/agno/issues/7866
exploitissue-tracking
https://github.com/agno-agi/agno/pull/7883
issue-tracking
https://github.com/agno-agi/agno/pull/7883/changes/26a7439b803c0ccc9a58ee53572d8088a678923f
issue-tracking
https://github.com/agno-agi/agno/pull/7883/changes/a0ec99305e782e68ba26f5966c53ad50b5f40132
issue-tracking
https://nvd.nist.gov/vuln/detail/CVE-2026-10105
https://www.vulncheck.com/advisories/agno-sql-injection-via-clickhouse-delete-by-metadata
third-party-advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-82m5-3pcp-hccq		Advisory
https://github.com/agno-agi/agno/issues/7866		exploitissue-tracking
https://github.com/agno-agi/agno/pull/7883		issue-tracking
https://github.com/agno-agi/agno/pull/7883/changes/26a7439b803c0ccc9a58ee53572d8088a678923f		issue-tracking
https://github.com/agno-agi/agno/pull/7883/changes/a0ec99305e782e68ba26f5966c53ad50b5f40132		issue-tracking
https://nvd.nist.gov/vuln/detail/CVE-2026-10105
https://www.vulncheck.com/advisories/agno-sql-injection-via-clickhouse-delete-by-metadata		third-party-advisory