Omnigent-ai vulnerabilities
We track 5 vulnerabilities in Omnigent-ai products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 18, 2026.
Latest Omnigent-ai vulnerabilities
- 7.5 High severity
omnigent: Improper Limitation of a Pathname to a Restricted Directory
Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working
- 8.8 High severity
omnigent: Improper Limitation of a Pathname to a Restricted Directory
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing os_env.cwd value because omnigent/spec/parse
- 7.1 High severity
omnigent: Incomplete List of Disallowed Inputs
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shared shell-command parser in omnigent/policies/builtins/_shell.py fails to recognize combined interpreter flags, the timeout, nice, setsid, an
- 8.8 High severity
omnigent: Improper Control of Generation of Code
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validate_agent_bundle does not reject a tool
- 9.0 Critical severity
omnigent: Improper Control of Generation of Code
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/{session_id}/agent checks LEVEL_EDIT permission for a session but does not reject a bound shared or template agent whose agent.session