Approval Bypass Vulnerability in OmniAgent by YeQing17

CVE-2026-125368

What is CVE-2026-125368?

OmniAgent, specifically via commit 12b98c5, contains an approval bypass vulnerability that allows agents to execute potentially harmful commands with elevated privileges. The flaw occurs in the ReflexionAgent._is_safe_bash_command function, where commands beginning with 'find' are considered safe without proper validation of '-execdir' parameters. This oversight can permit prompt-injected agents to leverage 'find -execdir' to run arbitrary binaries such as dd, nc, perl, or openssl in an unsandboxed shell environment. Consequently, this enables malicious file overwrites or unauthorized code execution without obtaining explicit user consent.

References