CVE-2026-88062: OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier,

OmniRoute, an open-source AI gateway (a tool that connects to multiple AI model providers through one interface), has a critical security flaw in version 3.8.49 and earlier. An attacker can send specially crafted requests to the /api/acp/agents endpoint that bypass security checks and execute arbitrary code (run any commands they want) on the server, especially when login is disabled or during initial setup. The vulnerability exists because the system uses weak filters to block dangerous shell commands and fails to properly authenticate or restrict access to sensitive endpoints.