CVE-2026-88062 diegosouzapw CVE debrief

Who should care

Defenders responsible for OmniRoute instances, especially those with anonymous access enabled or during fresh-instance bootstrap windows, should assess exposure and potential impact.

Why it matters

CVE-2026-88062 allows for arbitrary code execution in the OmniRoute server container under certain conditions, requiring defenders to verify exposure and assess potential impact.

• Potential arbitrary code execution in the server container
• Possible exposure of sensitive data
• Potential disruption of AI gateway services
• Verification of instance configuration and version

Technical summary

The OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before execFileSync executed the selected interpreter and arguments. The same request called refreshAgentCache, and resolveVersionProbe accepted the matched command before the execFileSync sink ran it. The tokenizeVersionCommand function and DISALLOWED_VERSION_COMMAND_CHARS filter rejected a limited set of shell metacharacters but still allowed interpreter evaluation arguments. The isAuthenticated function relied on isAuthRequired, which accepted anonymous requests when requireLogin was false, while api/acp/ was absent from LOCAL_ONLY_API_PREFIXES and

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, especially in environments with anonymous access enabled or during fresh-instance bootstrap windows.

Recommended defensive actions

• Verify exposure by checking if the OmniRoute instance is running version 3.8.49 or earlier and if requireLogin is set to false or during a fresh-instance bootstrap window.
• Assess potential impact by evaluating the privileges of the server container and potential access to sensitive data.
• Implement compensating controls, such as restricting access to the management interface and enforcing strong authentication.
• Monitor for suspicious activity and implement exception tracking to detect potential exploitation attempts.
• Review instance configuration and version to identify potential vulnerabilities.
• Track exceptions and retest remediated assets to ensure thorough verification.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in OmniRoute, an open-source AI gateway. The vulnerability allows for arbitrary code execution in the server container under certain conditions.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.