CVE-2026-112015— Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd
Quick assessment
Affected
omnigent-ai omnigent
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Omnigent 0.3.0 至 0.14.0 之前的版本存在路径遍历漏洞，允许已认证用户通过为嵌套子代理设置 来逃逸工作区。攻击者可上传一个包含子代理的 bundle，该子代理使用绝对路径或向上遍历的工作目录，从而绕过 中仅针对根目录的验证机制，以运行器（runner）用户的身份读取和写入主机文件。
Possible ATT&CK Techniques 3 AI
T1565 · Data Manipulation T1083 · File and Directory Discovery T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| omnigent-ai | omnigent | 0.3.0< 0.14.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112015
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd
Source: CVE Program / CVE List V5
Vulnerability Description
Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working directory, bypassing root-only validation in bundles.py, to read and write host files as the runner user.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| omnigent-ai | omnigent | 0.3.0 ~ 0.14.0 | - |
|
II. Public POCs for CVE-2026-112015
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112015
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-112015 (2)
Vendor Pages for CVE-2026-112015 (1)
-
🔗 Release v0.14.0 · omnigent-ai/omnigent · GitHub release-notes
IV. Related Vulnerabilities
Same product: omnigent
-
CVE-2026-62675
Omnigent: Uploaded Agent Bundle Allows Authenticated Runner -
CVE-2026-62674
Omnigent: Shared Agent Bundle Overwrite Leads to Authenticat -
CVE-2026-62677
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbi -
CVE-2026-62676
Omnigent Guardrail policy bypass: shell-command parser fails
Same vendor: omnigent-ai
-
CVE-2026-62675
Omnigent: Uploaded Agent Bundle Allows Authenticated Runner -
CVE-2026-62674
Omnigent: Shared Agent Bundle Overwrite Leads to Authenticat -
CVE-2026-62677
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbi -
CVE-2026-62676
Omnigent Guardrail policy bypass: shell-command parser fails
Same weakness: CWE-22
-
CVE-2026-112051
Xinference through 4.0.1 Path Traversal via model_name in Cu -
CVE-2026-112049
Vita3K before build 4187 Path Traversal via VPK Package Inst -
CVE-2026-112005
WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via D -
CVE-2026-110253
weForms <= 1.6.28 - Unauthenticated Limited Media File Delet -
CVE-2026-110268
Post Export Import with Media <= 1.17.2 - Authenticated (Adm
V. Comments for CVE-2026-112015
No comments yet