Skip to content
OpenAdvisories

Package · npm

omniroute

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.5
    CVE-2026-88062

    OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

    OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a …

    diegosouzapw OmniRoute omniroute npm