agno

v2.6.22 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 23d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agents ai ai-agents developer-tools python

Affected surfaces

rce_ssrf

Summary

AI summary

Updates Bug Fixes, New Features, and fix across a mixed release.

Full changelog

Changelog

New Features

TwelveLabs Tools: Added TwelveLabsTools to analyze videos and generate multimodal text embeddings. See docs.
Sofya Tools: Added SofyaTools for search, extract, and research.
SearchAPI Tool: Added SearchApiTools with Google, News, Images, and YouTube search.

Improvements

Toolkit Timeouts: Added timeout to the base Toolkit and wired HTTP timeouts across tools; extended timeout support to more toolkits.

Bug Fixes

ModelResponse: Stamp ModelResponse.created_at per instance instead of at import time.
AirflowTools: Prevent path traversal in save_dag_file and read_dag_file.
Fallback: Persist the fallback model's response in session history.
DuckDbTools: Sanitize derived table names and fix full-text search.

What's Changed

fix: stamp ModelResponse.created_at per instance instead of at import time by @kausmeows in https://github.com/agno-agi/agno/pull/8728
feat: add SearchAPI tool with Google, News, Images, and YouTube search by @fedegonc in https://github.com/agno-agi/agno/pull/8553
[feat] Add Sofya search, extract, and research tools by @yusufgurdogan in https://github.com/agno-agi/agno/pull/8593
feat: add timeout to base Toolkit; wire HTTP timeouts across tools by @kausmeows in https://github.com/agno-agi/agno/pull/8736
feat: add timeout to more toolkits by @kausmeows in https://github.com/agno-agi/agno/pull/8737
fix: persist fallback model response in session history by @harshsinha03 in https://github.com/agno-agi/agno/pull/8732
fix: prevent path traversal in AirflowTools save_dag_file and read_dag_file by @axelray-dev in https://github.com/agno-agi/agno/pull/8638
fix: sanitize DuckDbTools table names and fix FTS helpers by @harshsinha03 in https://github.com/agno-agi/agno/pull/8735
[feat] Add TwelveLabs video tools by @mohit-twelvelabs in https://github.com/agno-agi/agno/pull/8562
chore: Release v2.6.22 by @harshsinha03 in https://github.com/agno-agi/agno/pull/8734

New Contributors

@fedegonc made their first contribution in https://github.com/agno-agi/agno/pull/8553
@yusufgurdogan made their first contribution in https://github.com/agno-agi/agno/pull/8593
@axelray-dev made their first contribution in https://github.com/agno-agi/agno/pull/8638
@mohit-twelvelabs made their first contribution in https://github.com/agno-agi/agno/pull/8562

Full Changelog: https://github.com/agno-agi/agno/compare/v2.6.21...v2.6.22

Security Fixes

AirflowTools: Prevented path traversal in save_dag_file and read_dag_file methods

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track agno

Get notified when new releases ship.

About agno

Build, run, manage agentic software at scale.

All releases →