Search results

[Security] CsvTools read-only query can read and write local files through DuckDB

Status: Open.

#8643 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 30, 2026

[Security] Knowledge direct content APIs bypass linked_to isolation across shared content DBs

Status: Open.

#8642 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 30, 2026

[Security] AgentOS /teams and /workflows leak DB-loaded components despite per-resource RBAC

Status: Open.

#8641 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 30, 2026

[Security] AgentOS schedules can run higher-privileged endpoints through the internal scheduler token

Status: Open.

#8640 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 30, 2026

[Bug] Chinese characters displayed as Unicode escape sequences in JSON output

bugSomething isn't workingSomething isn't working

Status: Open.

#8635 In agno-agi/agno;

· TheHonestBob opened on Jun 30, 2026

[Security] AG-UI bypasses AgentOS JWT auth when mounted with a prefix

Status: Open.

#8633 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 29, 2026

[Security] Antigravity agent_directory follows symlinks and uploads outside files

Status: Open.

#8632 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 29, 2026

[Security] A2A interface bypasses AgentOS JWT authorization on run/control endpoints

Status: Open.

#8629 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 29, 2026

[Bug] Synchronous tools with async hooks freeze the event loop under aexecute

Status: Open.

#8627 In agno-agi/agno;

· Om-Borse26 opened on Jun 29, 2026

[Security] JWT env vars bypass OS_SECURITY_KEY when AgentOS authorization is disabled

bugSomething isn't workingSomething isn't working

Status: Open.

#8625 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 29, 2026

[Security] FileSystemKnowledge get_file can read outside base_dir

bugSomething isn't workingSomething isn't working

Status: Open.

#8624 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 29, 2026

[Security] AirflowTools can read and write outside dags_dir

bugSomething isn't workingSomething isn't working

Status: Open.

#8623 In agno-agi/agno;

· bogdancherniy11-sudo opened on Jun 29, 2026