CVE-2026-62675

Name of the Vulnerable Software and Affected Versions Omnigent versions prior to 0.3.0

Description Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. The multipart POST '/v1/sessions' endpoint accepts an authenticated user's agent bundle, but the validate agent bundle function in omnigent/server/bundles.py fails to reject a dotted Python path within the tools..callable parameter. Consequently, the resolve spec callable function in omnigent/runner/tool dispatch.py imports the specified module, and the execute spec callable tool function invokes the resolved function. This allows a bundle to select subprocess.check output and execute local commands with the permissions of the runner process, potentially exposing runner files, environment variables, credentials, workspace data, internal services, and availability without administrator access.

Recommendations Update to version 0.3.0.