Skip to content
Oomnigent-ai
Products
| Product | CVEs | Exploited | Latest |
|---|
| omnigent | 5 | – | Oct 18, 2026 |
Exploited and recent CVEs
-
CVE-2026-112015
High 7.5
Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd
0.4%
-
CVE-2026-62675
High 8.8
Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools
0.7%
-
CVE-2026-62674
Critical 9.0
Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE
0.5%
-
CVE-2026-62677
High 8.8
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE
0.6%
-
CVE-2026-62676
High 7.1
Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py
0.4%