Lucene search
+L

1205668 matches found

Vulnrichment
Vulnrichment
added 2026/08/21 5:47 p.m.5 views

CVE-2026-62674 Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/sessionid/agent checks LEVELEDIT permission for a session but does not reject a bound shared or template agent whose agent.sessionid is None. An authenticated user with ed...

9CVSS5.3AI score0.00343EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/21 5:47 p.m.11 views

EUVD-2026-64016

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/sessionid/agent checks LEVELEDIT permission for a session but does not reject a bound shared or template agent whose agent.sessionid is None. An authenticated user with ed...

9CVSS5.5AI score0.00343EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/21 5:47 p.m.27 views

CVE-2026-62674 Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/sessionid/agent checks LEVELEDIT permission for a session but does not reject a bound shared or template agent whose agent.sessionid is None. An authenticated user with ed...

9CVSS0.00343EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/21 5:47 p.m.30 views

CVE-2026-62674

Omnigent (open-source AI agent framework) prior to 0.3.0 is vulnerable to an authenticated Remote Code Execution via the PUT /sessions/{session_id}/agent endpoint. The endpoint validates LEVEL_EDIT permission for the session but fails to reject a bound shared or template agent whose agent.session...

9CVSS5.5AI score0.00343EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/21 5:44 p.m.10 views

CVE-2026-62677

Omnigent , an open-source AI agent framework for orchestrating coding agents, is vulnerable to arbitrary host filesystem access prior to version 0.3.0. An authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing os_env.cwd value. The parser (omnigent/sp...

8.8CVSS5.4AI score0.00446EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/21 5:44 p.m.11 views

EUVD-2026-64015

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

8.8CVSS5.4AI score0.00446EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/21 5:44 p.m.28 views

CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

8.8CVSS0.00446EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 5:44 p.m.8 views

CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

8.8CVSS5.5AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/08/21 5:44 p.m.10 views

CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

8.8CVSS5.3AI score0.00446EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/21 5:44 p.m.4 views

awesome-game-security

awesome-game-security If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. root@kitploit: Zeige Respekt gegenüber allen untenstehenden Projekten, perfekte Kunstwerke :salutingface: NeverC & NeverD — Dein Compiler & Decoder...

9.8CVSS7.1AI score0.72105EPSS
SaveExploits152References3
EUVD
EUVD
added 2026/08/21 5:42 p.m.13 views

EUVD-2026-64014

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shared shell-command parser in omnigent/policies/builtins/shell.py fails to recognize combined interpreter flags, the timeout, nice, setsid, and stdbuf wrappers, command...

7.1CVSS5.5AI score0.00295EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/21 5:42 p.m.15 views

CVE-2026-62676

Omnigent , an open-source AI agent framework for orchestrating coding agents, contains a policy bypass in its shared shell-command parser (omnigent/policies/builtins/_shell.py) prior to version 0.3.0. The parser fails to recognize combined interpreter flags, timeout/nice/setsid/stdbuf wrappers, c...

7.1CVSS5.5AI score0.00295EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/21 5:42 p.m.4 views

CVE-2026-62676 Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shared shell-command parser in omnigent/policies/builtins/shell.py fails to recognize combined interpreter flags, the timeout, nice, setsid, and stdbuf wrappers, command...

7.1CVSS5.4AI score0.00295EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 5:42 p.m.9 views

CVE-2026-62676 Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shared shell-command parser in omnigent/policies/builtins/shell.py fails to recognize combined interpreter flags, the timeout, nice, setsid, and stdbuf wrappers, command...

7.1CVSS5.6AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/21 5:42 p.m.25 views

CVE-2026-62676 Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shared shell-command parser in omnigent/policies/builtins/shell.py fails to recognize combined interpreter flags, the timeout, nice, setsid, and stdbuf wrappers, command...

7.1CVSS0.00295EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/21 5:42 p.m.30 views

CVE-2026-77235 Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

8.3CVSS0.0011EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 5:42 p.m.28 views

CVE-2026-77235

FreeRTOS-Kernel versions prior to 11.3.1 contain a missing privilege verification in the secure context cleanup handler (SecureContext_FreeContext). A local attacker with low privileges can trigger a use-after-free condition in secure-world memory through the SVC handler for secure context deallo...

8.3CVSS5.5AI score0.0011EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/08/21 5:42 p.m.11 views

EUVD-2026-64013

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

8.3CVSS5.5AI score0.0011EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/21 5:40 p.m.32 views

CVE-2026-77234 Improper input validation in FreeRTOS-Kernel timer command handling

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later...

9.3CVSS0.00119EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 5:40 p.m.25 views

CVE-2026-77234

FreeRTOS-Kernel before 11.3.1 contains an improper input validation flaw in timer command handling that allows an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. This represents a privilege escalation from user-space to kernel-space, with high impact on confid...

9.3CVSS5.6AI score0.00119EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder