CVE-2026-125368 is a high-severity approval bypass vulnerability in YeQing17-2026 OmniAgent. The flaw exists in the ReflexionAgent._is_safe_bash_command method, which incorrectly treats any command starting with 'find' as safe without properly inspecting the '-execdir' arguments. This allows prompt-injected agents to execute arbitrary binaries such as dd, nc, perl, or openssl via an unsandboxed shell, potentially leading to file overwrites or code execution without human approval.