CVE-2026-62675 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools
Authenticated users can execute arbitrary commands via malicious agent bundles in Omnigent, leading to remote code execution and data exposure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-62675?
CVE-2026-62675 is a high-severity code injection vulnerability in omnigent-ai omnigent, published on 21 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validate_agent_bundle does not reject a tools..callable dotted Python path. omnigent/runner/tool_dispatch.py _resolve_spec_callable imports the specified module and _execute_spec_callable_tool invokes the resolved function, allowing a bundle to select subprocess.check_output and execute a local command with the runner process permissions. This can expose runner files, environment variables, credentials, workspace data, internal services, and availability without administrator access. This issue is fixed in version 0.3.0.
Weakness: CWE-94
Which versions are affected by CVE-2026-62675?
3 open source packages ship an affected version, including omnigent.
| Package | Affected | Fixed in |
|---|---|---|
omnigent PyPI | All versions | 0.3.0 |
omnigent PyPI | All versions | 0.3.0 |
omnigent PyPI | All versions | 0.3.0 |
How do I fix CVE-2026-62675?
Upgrade omnigent to 0.3.0 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-62675 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-62675 exists.
Sources
Also known as GHSA-756x-9hf6-q4h4, PYSEC-2026-3872.