Product
Omnigent versions 0.3.0 through 0.13.x contain a path traversal vulnerability in bundles.py that allows authenticated attackers to escape restricted workspaces and read or write arbitrary files as the runner user.