Threats tagged 'ghsa-3ph8-93x7-786r'

OmniAgent up to commit 12b98c5 has an approval bypass vulnerability in the ReflexionAgent._is_safe_bash_command method. This flaw causes any command starting with 'find' to be treated as safe without properly inspecting the '-execdir' arguments. As a result, prompt-injected agents can exploit this to run 'find' with '-execdir' to invoke potentially dangerous binaries like dd, nc, perl, or openssl via an unsandboxed shell, enabling file overwrites or code execution without human approval.