Skip to content
OpenAdvisories

Vendor

omnigent-ai

5 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.0

    Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

    Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/{session_id}/agent checks LEVEL_EDIT permission for a session but does not reject a bound shared or template agent whose agent.sessio…