What’s Vulnerable › Products

omnigent-ai omnigent vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your omnigent-ai omnigent version is affected

Latest omnigent-ai omnigent vulnerabilities

• CVE-2026-112015 — Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd (CVSS 7.5)
• CVE-2026-62677 — Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE (CVSS 8.8)
• CVE-2026-62676 — Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py (CVSS 7.1)
• CVE-2026-62675 — Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools (CVSS 8.8)
• CVE-2026-62674 — Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE (CVSS 9.0)