Vendor
OmniAgent contains an approval bypass vulnerability in the ReflexionAgent._is_safe_bash_command method, allowing prompt-injected agents to execute arbitrary binaries via the find -execdir flag.