{"uuid": "bc0634d3-bd8b-4602-bcfc-90aaf9d87aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://gist.github.com/alon710/b615767eb56d905c1ec60c5678ca05fa", "content": "# CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62674\n\n## Summary\nA critical validation flaw in the backend of the omnigent framework prior to version 0.3.0 allows authenticated users to overwrite the global shared agent bundle, leading to remote code execution on the runner process through malicious stdio MCP server configurations.\n\n## TL;DR\nA session update endpoint in the omnigent framework fails to restrict operations on shared/built-in agents, allowing low-privilege users to poison global agent templates and execute arbitrary system commands on runners.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.0\n- **EPSS Score**: 0.00343\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- omnigent-ai/omnigent\n\n## Mitigation\n\n- Upgrade the omnigent package to version v0.3.0 or later to apply the validation fix.\n- Manually restrict session updates on shared/template agents where session_id is None.\n- Sandbox runner processes inside microVMs or strict Docker environments with limited egress traffic.\n\n**Remediation Steps:**\n1. Identify all deployed instances of omnigent running versions below 0.3.0.\n2. Apply the patch to omnigent/server/routes/sessions.py to introduce the check 'if agent.session_id is None'.\n3. Configure network egress rules on runners to allow only authorized destination IPs.\n4. Restart the omnigent server and runner components.\n\n## References\n\n- [NVD - CVE-2026-62674](https://nvd.nist.gov/vuln/detail/CVE-2026-62674)\n- [GitHub Security Advisory GHSA-jrrm-9hc7-2v3h](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h)\n- [GitHub Pull Request 1418](https://github.com/omnigent-ai/omnigent/pull/1418)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62674) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T22:32:18.194521Z"}