omnigent-ai omnigent

• CVE-2026-112015 High 7.5 Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd 0.4%
• CVE-2026-62675 High 8.8 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools 0.7%
• CVE-2026-62674 Critical 9.0 Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE 0.5%
• CVE-2026-62677 High 8.8 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE 0.6%
• CVE-2026-62676 High 7.1 Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py 0.4%