{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aomniagentomniagent/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:omniagent:omniagent:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-125368"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OmniAgent (\u003c= 12b98c5)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","command-injection","prompt-injection"],"_cs_type":"advisory","_cs_vendors":["OmniAgent"],"content_html":"\u003cp\u003eOmniAgent through commit 12b98c5 contains an approval bypass vulnerability in the ReflexionAgent._is_safe_bash_command function. The component incorrectly validates shell commands by only checking if they start with the 'find' utility, failing to inspect the arguments passed to the '-execdir' flag. This allows an attacker to bypass human-in-the-loop security controls.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker can leverage prompt injection to force the agent to execute unauthorized binaries such as 'dd', 'nc', 'perl', or 'openssl' within an unsandboxed shell environment. This results in the potential for arbitrary code execution or unauthorized file modification on the host running the agent.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all instances of OmniAgent running versions up to commit 12b98c5.\u003c/li\u003e\n\u003cli\u003eAudit application logs for calls to 'find' that include the '-execdir' argument within agent-managed shell execution environments.\u003c/li\u003e\n\u003cli\u003eImplement input validation or restrict binary execution at the OS level for environments hosting OmniAgent to prevent the execution of sensitive binaries like 'nc' or 'dd' by the agent process.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-10T02:04:30Z","date_published":"2026-11-10T02:04:30Z","id":"https://feed.craftedsignal.io/briefs/2026-11-omniagent-bypass/","summary":"OmniAgent contains an approval bypass vulnerability in the ReflexionAgent._is_safe_bash_command method, allowing prompt-injected agents to execute arbitrary binaries via the find -execdir flag.","title":"OmniAgent: ReflexionAgent command injection via find (CVE-2026-125368)","url":"https://feed.craftedsignal.io/briefs/2026-11-omniagent-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:omniagent:omniagent:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}