Remote Code Execution Vulnerability in Omnigent AI Framework

CVE-2026-62675

What is CVE-2026-62675?

The Omnigent AI Framework, an open-source solution for orchestrating coding agents, contains a vulnerability allowing authenticated users to execute arbitrary local commands. Specifically, the multipart POST functionality does not adequately validate user-supplied agent bundles. This oversight can lead to exposure of sensitive information, including environment variables and credentials, as malicious users can exploit subprocess.execution capabilities without requiring administrator privileges. Users are advised to upgrade to version 0.3.0, which addresses this security concern.

References