CVE-2026-62675 omnigent-ai CVE debrief

Who should care

Users of Omnigent AI agent framework versions prior to 0.3.0 should be aware of this vulnerability and take steps to mitigate it. This includes updating to version 0.3.0 or later, restricting access to agent bundle uploads, and monitoring for suspicious activity. Affected operators, platforms, vulnerability-management, and security teams should prioritize updating to version 0.3.0 or later and review compensating controls for exposed systems while remediation is scheduled and verified. Additionally, they should check relevant monitoring, detection, and logs for exposed assets that need extra review and track exceptions, retest remediated assets, and close the item only after evidence is documented. The vulnerability can expose runner files, environment variables, credentials, workspace data, internal services, and availability without administrator access, emphasizing the need for prompt action and thorough review of affected systems and processes. Users should also consider the potential operational impact and review context to ensure comprehensive mitigation and remediation efforts. This may involve coordinating with affected product or component owners, reviewing vulnerability class and source-confidence limits, and ensuring that all necessary defensive measures are in place to prevent exploitation and minimize potential damage. By taking these steps, users can help protect their systems and data from potential attacks and ensure the security and integrity of their Omnigent AI agent framework deployments. Furthermore, users should verify the authenticity of agent bundles and restrict access to agent bundle uploads to prevent similar vulnerabilities in the future. They should also monitor for suspicious activity and review compensating controls to ensure the security of their systems and data. Overall, users of Omnigent AI agent framework versions prior to 0.3.0 must take immediate action to mitigate this vulnerability and prevent potential attacks. This includes updating to version 0.3.0 or later, restricting access to agent bundle uploads, monitoring for suspicious activity, and reviewing compensating controls to ensure the security and integrity of their Om

Technical summary

CVE-2026-62675 is a HIGH severity vulnerability in Omnigent AI agent framework versions prior to 0.3.0. The issue allows an authenticated user to execute local commands with runner process permissions by crafting a malicious agent bundle. This is due to inadequate validation in validate_agent_bundle and insecure imports in _resolve_spec_callable. The vulnerability can expose runner files, environment variables, credentials, workspace data, internal services, and availability without administrator access.

Defensive priority

CVE-2026-62675 is rated HIGH with a CVSS score of 8.8. Omnigent AI agent framework versions prior to 0.3.0 are vulnerable to a command execution issue via specially crafted agent bundles. Users should prioritize updating to version 0.3.0 or later.

Recommended defensive actions

• Update Omnigent to version 0.3.0 or later
• Restrict access to agent bundle uploads
• Monitor for suspicious agent bundle activity
• Review and limit runner process permissions
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE-2026-62675 issue allows an authenticated user to execute local commands with runner process permissions by crafting a malicious agent bundle. This is due to inadequate validation in validate_agent_bundle and insecure imports in _resolve_spec_callable. Evidence is based on NVD and CVE.org records.

Official resources