OmniRoute vulnerabilities
1 known vulnerability in OmniRoute from Diegosouzapw. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.5average CVSS score
Latest first
- 9.5 Critical severity
OmniRoute: Improper Control of Generation of Code
OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a s