https://vulnerability.circl.lu/sightings/feed 2026-09-03T19:17:07.127394+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/01fd6f70-cc4f-401f-bd50-29c303be7266/export 2026-09-03T19:17:07.149380+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "01fd6f70-cc4f-401f-bd50-29c303be7266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://gist.github.com/alon710/b615767eb56d905c1ec60c5678ca05fa", "content": "# CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62674\n\n## Summary\nA critical validation flaw in the backend of the omnigent framework prior to version 0.3.0 allows authenticated users to overwrite the global shared agent bundle, leading to remote code execution on the runner process through malicious stdio MCP server configurations.\n\n## TL;DR\nA session update endpoint in the omnigent framework fails to restrict operations on shared/built-in agents, allowing low-privilege users to poison global agent templates and execute arbitrary system commands on runners.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.0\n- **EPSS Score**: 0.00343\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- omnigent-ai/omnigent\n\n## Mitigation\n\n- Upgrade the omnigent package to version v0.3.0 or later to apply the validation fix.\n- Manually restrict session updates on shared/template agents where session_id is None.\n- Sandbox runner processes inside microVMs or strict Docker environments with limited egress traffic.\n\n**Remediation Steps:**\n1. Identify all deployed instances of omnigent running versions below 0.3.0.\n2. Apply the patch to omnigent/server/routes/sessions.py to introduce the check 'if agent.session_id is None'.\n3. Configure network egress rules on runners to allow only authorized destination IPs.\n4. Restart the omnigent server and runner components.\n\n## References\n\n- [NVD - CVE-2026-62674](https://nvd.nist.gov/vuln/detail/CVE-2026-62674)\n- [GitHub Security Advisory GHSA-jrrm-9hc7-2v3h](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h)\n- [GitHub Pull Request 1418](https://github.com/omnigent-ai/omnigent/pull/1418)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62674) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T00:00:27.580418Z"} 2026-09-03T00:00:27.580418+00:00 https://vulnerability.circl.lu/sighting/bc0634d3-bd8b-4602-bcfc-90aaf9d87aa0/export 2026-09-03T19:17:07.151549+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bc0634d3-bd8b-4602-bcfc-90aaf9d87aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://gist.github.com/alon710/b615767eb56d905c1ec60c5678ca05fa", "content": "# CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62674\n\n## Summary\nA critical validation flaw in the backend of the omnigent framework prior to version 0.3.0 allows authenticated users to overwrite the global shared agent bundle, leading to remote code execution on the runner process through malicious stdio MCP server configurations.\n\n## TL;DR\nA session update endpoint in the omnigent framework fails to restrict operations on shared/built-in agents, allowing low-privilege users to poison global agent templates and execute arbitrary system commands on runners.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.0\n- **EPSS Score**: 0.00343\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- omnigent-ai/omnigent\n\n## Mitigation\n\n- Upgrade the omnigent package to version v0.3.0 or later to apply the validation fix.\n- Manually restrict session updates on shared/template agents where session_id is None.\n- Sandbox runner processes inside microVMs or strict Docker environments with limited egress traffic.\n\n**Remediation Steps:**\n1. Identify all deployed instances of omnigent running versions below 0.3.0.\n2. Apply the patch to omnigent/server/routes/sessions.py to introduce the check 'if agent.session_id is None'.\n3. Configure network egress rules on runners to allow only authorized destination IPs.\n4. Restart the omnigent server and runner components.\n\n## References\n\n- [NVD - CVE-2026-62674](https://nvd.nist.gov/vuln/detail/CVE-2026-62674)\n- [GitHub Security Advisory GHSA-jrrm-9hc7-2v3h](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h)\n- [GitHub Pull Request 1418](https://github.com/omnigent-ai/omnigent/pull/1418)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62674) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T22:32:18.194521Z"} 2026-09-02T22:32:18.194521+00:00 https://vulnerability.circl.lu/sighting/50ad7182-14b3-456d-94c6-22872c8c1b70/export 2026-09-03T19:17:07.151734+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "50ad7182-14b3-456d-94c6-22872c8c1b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtpyz2gyov2f", "content": "CVE-2026-62674\nIn older versions of the Omnigent AI\u2011agent platform, a user who could edit a project could replace a shared component with malicious code. When later projects use that component, the malicious code runs with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-23T05:00:03.732018Z"} 2026-08-23T05:00:03.732018+00:00 https://vulnerability.circl.lu/sighting/1b779bcf-7fb4-4819-b086-7e4290342484/export 2026-09-03T19:17:07.151861+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1b779bcf-7fb4-4819-b086-7e4290342484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmugizzq425", "content": "CVE-2026-62674 - omnigent\nIn versions of Omnigent before 0.3.0, a user who has edit rights to a project could replace a shared component and cause the system to run any command they choose. Those\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#omnigent #omnigentai #CVE #infosec", "creation_timestamp": "2026-08-21T23:00:07.220608Z"} 2026-08-21T23:00:07.220608+00:00 https://vulnerability.circl.lu/sighting/4ad69a85-08af-41d2-a6a2-d47c88cff02b/export 2026-09-03T19:17:07.151981+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4ad69a85-08af-41d2-a6a2-d47c88cff02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmh3r4ykm22", "content": "\ud83d\udd34 CVE-2026-62674 - Critical (9)\n\nOmnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62674/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T19:01:28.351772Z"} 2026-08-21T19:01:28.351772+00:00