CVE-2026-112015highCWE-22

CVE-2026-112015: falha de alta gravidade em omnigent-ai omnigent

Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd

Publicada em

Seguir esta CVE+ Monitorar omnigent

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.7epss 0.4%
Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working directory, bypassing root-only validation in bundles.py, to read and write host files as the runner user.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
omnigent-ai · omnigent
CVEs relacionadas — omnigent-ai omnigent

No mesmo produto, das mais perigosas para as menos.

CVE-2026-62675HIGHOmnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable ToolsEPSS 0.7%CVE-2026-62677HIGHOmnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACEEPSS 0.6%CVE-2026-62674CRITICALOmnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCEEPSS 0.5%CVE-2026-62676HIGHOmnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.pyEPSS 0.4%