OmniRoute < 3.8.49 - Unauthenticated RCE

OmniRoute = 3.8.49 contains a remote code execution caused by insufficient validation of interpreter arguments in the POST /api/acp/agents endpoint, letting remote attackers execute arbitrary code, exploit requires anonymous access when requireLogin is false or management session/API key when tru...

VulnCheck KEV: CVE-2026-88062

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

CVE-2026-88062

creationtimestamp| type| source ---|---|--- 2026-09-10 22:08:00+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv72tqjxvr2t 2026-09-10 22:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv72xjylga2y 2026-09-10 22:35:07+00:00| published-proof-of-concept|...

NPM: OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

NPM: OmniRoute ACP Custom-Agent Remote Code Execution RCE vulnerability discovered by ? in WordPress Npm omniroute versions = 3.8.50...

GHSA-HF57-CQMX-P4GR OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

Summary POST /api/acp/agents registers a custom ACP agent. The endpoint accepts user-controlled binary and versionCommand values. After saving the custom agent, the same request calls refreshAgentCache, which triggers agent version detection. The version probe eventually runs: ts...

OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

Summary POST /api/acp/agents registers a custom ACP agent. The endpoint accepts user-controlled binary and versionCommand values. After saving the custom agent, the same request calls refreshAgentCache, which triggers agent version detection. The version probe eventually runs: ts...

CVE-2026-88062

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

CVE-2026-88062 OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

EUVD-2026-75705

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

CVE-2026-88062 OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

CVE-2026-88062

OmniRoute (versions 3.8.49 and earlier ) is vulnerable to Remote Code Execution (RCE) via the POST /api/acp/agents endpoint. The application fails to properly validate user-controlled binary and versionCommand values, relying only on a self-consistency check that allows attackers to supply interp...

CVE-2026-88062 OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

CVE-2026-88062: Improper Control of Generation of Code

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

PT-2026-89691

Summary POST /api/acp/agents registers a custom ACP agent. The endpoint accepts user-controlled binary and versionCommand values. After saving the custom agent, the same request calls refreshAgentCache, which triggers agent version detection. The version probe eventually runs: ts...

PT-2026-89575

Name of the Vulnerable Software and Affected Versions OmniRoute versions 3.x through 3.8.49 Description OmniRoute contains a remote code execution flaw in the POST /api/acp/agents endpoint used for registering custom ACP agents. The endpoint accepts user-controlled binary and versionCommand value...