Live › vulnerability › CVE-2026-112015
Go to dashboardOmnigent versions 0.3.0 through 0.14.0 (exclusive) let an authenticated user upload an agent bundle whose nested sub-agent sets os_env.cwd to an absolute or parent-traversing path. The root-only check in bundles.py does not block this, so the attacker can read and write host files as the runner user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Omnigent from 0.3.0 up to but not including 0.14.0 where authenticated users can upload agent bundles. Exposure depends on whether untrusted users can reach the bundle upload path; deployments already on 0.14.0 or later are not affected.
No product ranges from the sources yet.
0.3.0 and below 0.14.0.os_env.cwd to an absolute path or one containing ...0.14.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working directory, bypassing root-only validation in bundles.py, to read and write host files as the runner user.
This page as .md · .json · in your agent: get_signal("CVE-2026-112015")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.