CVE-2026-62677: Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authe

Omnigent, an open-source framework for running AI coding agents, had a vulnerability in versions before 0.3.0 where authenticated users could upload malicious agent bundles with specially crafted file paths that bypass security checks. This allowed attackers to access files and secrets outside the intended workspace using tools that read, write, and execute code. The vulnerability was fixed in version 0.3.0.