PyPI/omnigent CVE-2026-62674: critical 9, EPSS 0.51%

Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

Action: Upgrade omnigent to 0.3.0 or later.

pip install omnigent==0.3.0

Affected

Fixed versions

Sources

• osv: GHSA-jrrm-9hc7-2v3h
• https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h
• https://nvd.nist.gov/vuln/detail/CVE-2026-62674
• https://github.com/omnigent-ai/omnigent/pull/1418
• https://github.com/omnigent-ai/omnigent/commit/25a22dc9e6da4648d23749f0a589e47e6aed991b
• https://github.com/omnigent-ai/omnigent
• https://github.com/omnigent-ai/omnigent/releases/tag/v0.3.0

CVE-2026-62674 · published 2026-09-02T21:55:11Z · modified 2026-09-10T12:26:00.069825887Z · JSON