CVE-2026-88062

Name of the Vulnerable Software and Affected Versions OmniRoute versions 3.x through 3.8.49

Description OmniRoute contains a remote code execution flaw in the POST /api/acp/agents endpoint used for registering custom ACP agents. The endpoint accepts user-controlled binary and versionCommand values, which are processed by the resolveVersionProbe() function. This function only performs a self-consistency check to ensure the first token of versionCommand matches the binary value. Because both parameters are attacker-controlled, an attacker can bypass this check by providing a matching interpreter (e.g., node) and an evaluation argument (e.g., node -e).

The request subsequently triggers the refreshAgentCache() function, which leads to the execution of the command via execFileSync(). While the tokenizeVersionCommand() function and DISALLOWED VERSION COMMAND CHARS filter block some shell metacharacters, they do not prevent the use of interpreter evaluation arguments.

If requireLogin is set to false or the system is in a fresh-instance bootstrap window without a management password, a remote anonymous attacker can execute arbitrary code within the server container. If requireLogin is enabled, exploitation requires a management session or a management-scoped API key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the POST /api/acp/agents endpoint or ensure that requireLogin is set to true with a strong management password configured.