CVE-2026-62676

Name of the Vulnerable Software and Affected Versions Omnigent versions prior to 0.3.0

Description The shared shell-command parser in omnigent/policies/builtins/ shell.py fails to recognize combined interpreter flags, command substitutions, a single background control operator, and wrappers such as timeout, nice, setsid, and stdbuf. This failure allows a gated git push or gh write command to bypass the write repos and write branches allowlists in github.py and the workspace confinement policies in working dir.py. Consequently, an authenticated or prompt-injected agent can push to an unauthorized repository or branch or escape the intended workspace.

Recommendations Update to version 0.3.0.