{"data":{"id":"b45dfcfc-8198-45c0-9070-7d796ca178cc","title":"CVE-2026-62675: Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipar","summary":"Omnigent is an open-source framework for managing AI agents that write code. Before version 0.3.0, it had a security flaw where authenticated users could upload agent bundles (packages of code and configuration) that contained malicious Python commands, which the system would then execute with full permissions of the process running Omnigent, potentially exposing sensitive files, passwords, and internal data.","solution":"This issue is fixed in version 0.3.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-62675","publishedAt":"2026-08-21T18:16:49.603Z","cveId":"CVE-2026-62675","cweIds":["CWE-94"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["Omnigent"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-21T18:16:49.603Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}