Evidence · DiggingBeagle record
Agno issue 8699: unrestricted PandasTools dispatch
Agno issue documenting model-selected pandas function dispatch and the read_pickle deserialization risk.
- Published
- Oct 29, 2026
- Source role
- primary disclosure
Evidence record
Agno issue documenting model-selected pandas function dispatch and the read_pickle deserialization risk.
Claim-level citations (1)
- supportsAgno PandasTools let a model-selectable function reach unsafe pickle loading: Agno issue 8699 describes unrestricted pandas function dispatch through getattr before output-type validation, allowing an unsafe read_pickle call when inputs are attacker-influenced.
Agno issue 8699, create_pandas_dataframe selected function and read_pickle discussion