agno

v2.7.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 17d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agents ai ai-agents developer-tools python

Affected surfaces

auth rbac

ReleasePort's take

Moderate signal

editorial:auto 11d

The release introduces OAuth support for the AgentOS MCP endpoint and enhances `agno connect` with multi‑target management, while critically fixing a path‑traversal vulnerability in `FileSystemKnowledge.get_file`. It also renames an AgentOS configuration parameter.

Why it matters: Severity 90 security fix blocks directory traversal attacks; developers using the API must adopt the patch immediately. OAuth and CLI improvements streamline authentication and remote execution workflows.

Summary

AI summary

Updates Bug Fixes, New Features, and feat across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Prevents path traversal in `FileSystemKnowledge.get_file` method. Prevents path traversal in `FileSystemKnowledge.get_file` method. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature
Feature	Low	Adds OAuth support for AgentOS MCP endpoint via `AgentOS(mcp_auth=...)`. Adds OAuth support for AgentOS MCP endpoint via `AgentOS(mcp_auth=...)`. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds `client_tools` support for AG-UI frontend tools. Adds `client_tools` support for AG-UI frontend tools. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Enhances `agno connect` with multi-target select, disconnect, restart hints, and identity‑named entries. Enhances `agno connect` with multi-target select, disconnect, restart hints, and identity‑named entries. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Renames `AgentOS` parameter `enable_mcp_server` to `mcp_server` and folds in `mcp_config`. Renames `AgentOS` parameter `enable_mcp_server` to `mcp_server` and folds in `mcp_config`. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix
Bugfix	Medium	Serializes media for remote agent and team runs. Serializes media for remote agent and team runs. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Injects `run_context`, `agent`, and `team` parameters into `@tool`‑decorated Toolkit methods. Injects `run_context`, `agent`, and `team` parameters into `@tool`‑decorated Toolkit methods. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Honors timezone‑aware start and end dates across Google Calendar list, create, and update events. Honors timezone‑aware start and end dates across Google Calendar list, create, and update events. Source: llm_adapter@2026-07-16 Confidence: high	—
Refactor	Low	Moves A2A scope mappings to the interface and fixes custom prefix support. Moves A2A scope mappings to the interface and fixes custom prefix support. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

Changelog

New Features

OAuth on the AgentOS MCP Endpoint: Added OAuth support for the AgentOS MCP endpoint via AgentOS(mcp_auth=...). See cookbook.
AG-UI Client Tools: Added client_tools support for AG-UI frontend tools.
agno connect Enhancements: Multi-target select, disconnect, restart hints, and identity-named entries.

Improvements

A2A Scope Mappings: Moved A2A scope mappings to the interface and fixed custom prefix support.

Bug Fixes

Remote Runs (Media): Serialize media for remote agent and team runs.
FileSystemKnowledge (Security): Prevent path traversal in FileSystemKnowledge.get_file.
@tool Methods: Toolkit methods decorated with @tool now receive injected run_context, agent, and team parameters.
Google Calendar Tools: Timezone-aware start_date/end_date are now honored across list_events, create_event, and update_event.

What's Changed

refactor: move A2A scope mappings to interface, fix custom prefix support by @Mustafa-Esoofally in https://github.com/agno-agi/agno/pull/8788
cookbook: update MiniMax M3 cookbook metadata by @octo-patch in https://github.com/agno-agi/agno/pull/8813
feat: add client_tools support for AG-UI frontend tools by @Mustafa-Esoofally in https://github.com/agno-agi/agno/pull/8565
fix: serialize media for remote agent and team runs by @kausmeows in https://github.com/agno-agi/agno/pull/8832
fix: prevent path traversal in FileSystemKnowledge.get_file (#8624) by @ProgrammerPlus1998 in https://github.com/agno-agi/agno/pull/8726
feat: agno connect multi-target select, disconnect, restart hints, identity-named entries by @ashpreetbedi in https://github.com/agno-agi/agno/pull/8797
feat: OAuth on the AgentOS MCP endpoint via AgentOS(mcp_auth=...) by @ashpreetbedi in https://github.com/agno-agi/agno/pull/8793
feat: rename AgentOS enable_mcp_server to mcp_server, fold in mcp_config by @ashpreetbedi in https://github.com/agno-agi/agno/pull/8812
fix: inject run_context into @tool-decorated Toolkit methods by @kausmeows in https://github.com/agno-agi/agno/pull/8830
fix: normalize calendar list event start dates by @Success6666 in https://github.com/agno-agi/agno/pull/8700
chore: Release v2.7.2 by @kausmeows in https://github.com/agno-agi/agno/pull/8844

New Contributors

@ProgrammerPlus1998 made their first contribution in https://github.com/agno-agi/agno/pull/8726

Full Changelog: https://github.com/agno-agi/agno/compare/v2.7.1...v2.7.2

Security Fixes

FileSystemKnowledge.get_file now prevents path traversal (#8624)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track agno

Get notified when new releases ship.

About agno

Build, run, manage agentic software at scale.

All releases →