CVE-2026-62677
2 advisories.
PyPI/omnigent CVE-2026-62677: high 8.8
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE
Action: Upgrade omnigent to 0.3.0 or later.
pip install omnigent==0.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.0 | - |
Fixed versions
| 0.3.0 |
Sources
- osv: GHSA-p8rw-8qj3-hf33
- https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-p8rw-8qj3-hf33
- https://nvd.nist.gov/vuln/detail/CVE-2026-62677
- https://github.com/omnigent-ai/omnigent/pull/1417
- https://github.com/omnigent-ai/omnigent/commit/7ca0cca3c9a65c04c489edf68f0e080424a26868
- https://github.com/omnigent-ai/omnigent
- https://github.com/omnigent-ai/omnigent/releases/tag/v0.3.0
CVE-2026-62677 · published · modified · JSON
PyPI/omnigent CVE-2026-62677: high 8.8
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE
Action: Upgrade omnigent to 0.3.0 or later.
pip install omnigent==0.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.0 | - |
Fixed versions
| 0.3.0 |
Sources
- osv: PYSEC-2026-3875
- https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-p8rw-8qj3-hf33
- https://nvd.nist.gov/vuln/detail/CVE-2026-62677
- https://github.com/omnigent-ai/omnigent/pull/1417
- https://github.com/omnigent-ai/omnigent/commit/7ca0cca3c9a65c04c489edf68f0e080424a26868
- https://github.com/omnigent-ai/omnigent
- https://github.com/omnigent-ai/omnigent/releases/tag/v0.3.0
- https://pypi.org/project/omnigent
- https://github.com/advisories/GHSA-p8rw-8qj3-hf33
CVE-2026-62677 · published · modified · JSON