Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-62674: Omnigent lets authenticated users execute code via shared agent

CVE-2026-62674 · published 2 months ago

Summary

Versions of Omnigent before 0.3.0 let a user who can edit a session replace a shared agent bundle. That replacement can cause later sessions to run attacker‑controlled commands with the same rights as the Omnigent runner, exposing files, credentials and internal services. Upgrade to version 0.3.0 or later to stop this behavior.

What to do

Update databricks omnigent to version 0.3.0.
Update omnigent to version 0.3.0.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	omnigent-ai	omnigent	< 0.3.0
pip	databricks	omnigent	< 0.3.0 Fix: upgrade to 0.3.0
PyPI	–	omnigent	< 0.3.0 Fix: upgrade to 0.3.0

Original advisory text

Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/{session_id}/agent checks LEVEL_EDIT permission for a session but does not reject a bound shared or template agent whose agent.session_id is None. An authenticated user with edit access to a session can replace that shared agent bundle through omnigent/server/routes/sessions.py, add a stdio MCP server, and cause later sessions that use the shared agent to launch an attacker-controlled command through omnigent/tools/mcp.py. The command executes with the Omnigent runner process permissions and can expose files, credentials, workspace data, internal services, and runner availability. This issue is fixed in version 0.3.0.

References

https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/62xxx/CVE-2026-62674... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62674 Vendor Advisory
https://github.com/omnigent-ai/omnigent Product
https://pypi.org/project/omnigent Product
https://github.com/advisories/GHSA-jrrm-9hc7-2v3h
https://github.com/omnigent-ai/omnigent/releases/tag/v0.3.0 URL
https://github.com/omnigent-ai/omnigent/commit/25a22dc9e6da4648d23749f0a589e47e6... Patch
https://github.com/omnigent-ai/omnigent/pull/1418 Patch
https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

9.0 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-94Code Injection

Timeline

Published21 Aug 2026

Updated30 Oct 2026

First seen21 Aug 2026

Sources

CVE-2026-62674 · NVD

CVE-2026-62674 · MITRE

GHSA-jrrm-9hc7-2v3h · GHSA

CVE-2026-62674 · OSV

PYSEC-2026-3874 · OSV

Track software like this

Free during beta