Skip to content
OpenAdvisories

Product · omnigent-ai

omnigent

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.0

    Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

    Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/{session_id}/agent checks LEVEL_EDIT permission for a session but does not reject a bound shared or template agent whose agent.sessio…