CVE-2026-62675

Omnigent , an open-source AI agent framework, is vulnerable to authenticated remote code execution prior to version 0.3.0. The root cause is that validate_agent_bundle in omnigent/server/bundles.py does not reject a tools..callable dotted Python path. When a malicious agent bundle is uploaded via...