{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/omnigent-0.3.0---0.13.x/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:omnigent:omnigent:0.3.0:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-112015"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Omnigent (0.3.0 - 0.13.x)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","path-traversal","privilege-escalation"],"_cs_type":"advisory","_cs_vendors":["Omnigent"],"content_html":"\u003cp\u003eOmnigent versions 0.3.0 through 0.13.x are susceptible to a path traversal vulnerability (CVE-2026-112015) located within the bundles.py component. The flaw arises from insufficient validation of the os_env.cwd parameter assigned to nested sub-agents during bundle processing. Authenticated users can provide specially crafted bundle files that specify an absolute path or use parent directory traversal (e.g., ../) for the sub-agent working directory. This bypasses the intended root-only validation mechanisms within the application. By successfully exploiting this flaw, an attacker gains the ability to perform arbitrary file reads and writes on the host system running the Omnigent agent. Because the agent executes these operations with the privileges of the runner process, successful exploitation can result in full compromise of the local environment, including access to sensitive configuration files, credentials, or the ability to inject malicious code to achieve persistence.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability poses a high risk to organizations utilizing Omnigent versions 0.3.0 to 0.13.x. Successful exploitation allows for unconstrained file system access, potentially leading to data exfiltration or privilege escalation on systems where the Omnigent runner process is deployed. No specific victim sector is identified, but any environment relying on Omnigent for task orchestration is at risk of unauthorized host-level modifications.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Omnigent to version 0.14.0 or later to patch the path traversal vulnerability in bundles.py.\u003c/li\u003e\n\u003cli\u003eAudit logs for the execution of the Omnigent runner process to identify unexpected file access patterns outside of the designated workspace directories.\u003c/li\u003e\n\u003cli\u003eApply the principle of least privilege to the service accounts executing Omnigent runners to limit the impact of potential file system writes.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-18T12:21:51Z","date_published":"2026-10-18T12:21:51Z","id":"https://feed.craftedsignal.io/briefs/2026-10-omnigent-path-traversal/","summary":"Omnigent versions 0.3.0 through 0.13.x contain a path traversal vulnerability in bundles.py that allows authenticated attackers to escape restricted workspaces and read or write arbitrary files as the runner user.","title":"Path Traversal Vulnerability in Omnigent","url":"https://feed.craftedsignal.io/briefs/2026-10-omnigent-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Omnigent (0.3.0 - 0.13.x)","version":"https://jsonfeed.org/version/1.1"}