Arbitrary Code Execution Vulnerability in OmniRoute Gateway by Diego Sousa

CVE-2026-88062

What is CVE-2026-88062?

OmniRoute is an open-source AI gateway that serves as a unified endpoint for various model providers. In versions 3.8.49 and earlier, it has a critical vulnerability where the custom ACP agent endpoint permits attacker-controlled payloads. The endpoint conducts minimal self-consistency checks before executing commands through execFileSync. Both the refreshAgentCache and resolveVersionProbe functions can process matched commands, potentially allowing malicious inputs. The filter meant to block dangerous shell metacharacters fails to restrict harmful interpreter evaluation arguments. The security mechanism relies on isAuthenticated logic, which can be bypassed if requireLogin is set to false, permitting unauthenticated remote requests. This vulnerability poses a risk for executing arbitrary code within the server environment, especially if a management password has not been implemented. Currently, there are no available patched versions addressing this issue.

References