CVE-2026-62674: CWE-94: Improper Control of Generation of Code ('Code Injection') in omnigent-ai omnigent
CVE-2026-62674 is a critical code injection vulnerability in the omnigent open-source AI agent framework. Before version 0.3.0, the PUT /sessions/{session_id}/agent endpoint improperly allows an authenticated user with edit permissions to replace a shared or template agent with agent.session_id set to None. This flaw enables execution of attacker-controlled commands with the permissions of the Omnigent runner process, potentially exposing sensitive files, credentials, workspace data, internal services, and affecting runner availability. The issue is fixed in version 0.3.0.
AI Analysis
Technical Summary
Omnigent versions prior to 0.3.0 contain a code injection vulnerability (CWE-94) in the session agent update endpoint. The system checks LEVEL_EDIT permission for a session but does not reject shared or template agents with a null session_id. An authenticated user with edit access can exploit this by replacing the shared agent bundle, adding a stdio MCP server, and causing subsequent sessions to execute arbitrary commands via omnigent/tools/mcp.py. These commands run with the Omnigent runner process privileges, risking confidentiality, integrity, and availability of the system. The vulnerability is resolved in version 0.3.0.
Potential Impact
Successful exploitation allows an authenticated user with edit permissions to execute arbitrary commands on the Omnigent runner process. This can lead to exposure of sensitive files, credentials, workspace data, internal services, and disruption of runner availability. The vulnerability affects confidentiality, integrity, and availability of the affected system.
Mitigation Recommendations
This vulnerability is fixed in omnigent version 0.3.0. Users should upgrade to version 0.3.0 or later to remediate this issue. No vendor advisory content is provided to indicate alternative mitigations or temporary fixes. Patch status is not yet confirmed by a vendor advisory but the fix version is explicitly stated.
CVE-2026-62674: CWE-94: Improper Control of Generation of Code ('Code Injection') in omnigent-ai omnigent
Description
CVE-2026-62674 is a critical code injection vulnerability in the omnigent open-source AI agent framework. Before version 0.3.0, the PUT /sessions/{session_id}/agent endpoint improperly allows an authenticated user with edit permissions to replace a shared or template agent with agent.session_id set to None. This flaw enables execution of attacker-controlled commands with the permissions of the Omnigent runner process, potentially exposing sensitive files, credentials, workspace data, internal services, and affecting runner availability. The issue is fixed in version 0.3.0.
CVSS v3.1
Score 9.0critical
Affected software
pkg:github/omnigent-ai/omnigentRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Omnigent versions prior to 0.3.0 contain a code injection vulnerability (CWE-94) in the session agent update endpoint. The system checks LEVEL_EDIT permission for a session but does not reject shared or template agents with a null session_id. An authenticated user with edit access can exploit this by replacing the shared agent bundle, adding a stdio MCP server, and causing subsequent sessions to execute arbitrary commands via omnigent/tools/mcp.py. These commands run with the Omnigent runner process privileges, risking confidentiality, integrity, and availability of the system. The vulnerability is resolved in version 0.3.0.
Potential Impact
Successful exploitation allows an authenticated user with edit permissions to execute arbitrary commands on the Omnigent runner process. This can lead to exposure of sensitive files, credentials, workspace data, internal services, and disruption of runner availability. The vulnerability affects confidentiality, integrity, and availability of the affected system.
Mitigation Recommendations
This vulnerability is fixed in omnigent version 0.3.0. Users should upgrade to version 0.3.0 or later to remediate this issue. No vendor advisory content is provided to indicate alternative mitigations or temporary fixes. Patch status is not yet confirmed by a vendor advisory but the fix version is explicitly stated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-07-14T20:22:04.395Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a88906bacd9273b497ffd4b
Added to database: 08/21/2026, 17:52:43 UTC
Last enriched: 08/21/2026, 18:08:18 UTC
Last updated: 08/21/2026, 19:31:04 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.