AIKIDO-2026-10852
agno is vulnerable to Insecure Direct Object Reference (IDOR)
81
High Risk
This Affects:
agnoTL;DR
Agno's AgentOS routes trust caller-supplied user_id values in several authenticated request paths. An authenticated user can pass another user's identifier through HTTP traces or approvals endpoints, or through WebSocket workflow messages, and access or act on data outside their own account. This breaks user-level authorization for traces, approvals, and workflow operations. The fix binds those request paths to the JWT-derived subject and overwrites any supplied user_id before database or workflow handling.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
agno is vulnerable to Insecure Direct Object Reference (IDOR) in versions 2.3.5 - 2.6.5.
How to fix this
Upgrade the agno library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant