2 matches found
VulnCheck KEV: CVE-2026-88062
OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...
9.5CVSS6.4AI score0.01424EPSS
SaveIn wildExploits0References3
CVE-2026-88062: Improper Control of Generation of Code
OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...
9.5CVSS6.4AI score0.01424EPSS
SaveExploits0References3
20