Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.4

Omnigent lets logged-in users access any file on host

CVE-2026-112015 · published 16 days ago
Summary

In Omnigent versions before 0.14.0, a user who has logged in can change the working directory of a sub‑process and move outside the intended workspace. This lets the user read or write files on the server as the same user that runs Omnigent. Update to version 0.14.0 or later, or remove the ability for users to set the working directory, to stop the risk.

What to do
  • Update omnigent-ai omnigent to version 0.14.0 or later.
Affected software
VendorProductAffected versions
omnigent-ai omnigent < 0.14.0
Original advisory text
Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd
Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working directory, bypassing root-only validation in bundles.py, to read and write host files as the runner user.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.4 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published18 Oct 2026
Updated30 Oct 2026
First seen18 Oct 2026
Sources
CVE-2026-112015 · NVD
CVE-2026-112015 · MITRE
CVE-2026-112015 · OSV
GHSA-p5x3-3gqh-x44g · GHSA
Track software like this
Free during beta