CVE-2026-62676: Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shar

Omnigent is an open-source framework for running AI agents that write code. Before version 0.3.0, its command parser had a bug that failed to recognize certain shell command patterns (like combined flags, command substitutions, and background operators), which allowed security policies meant to restrict where agents could push code or work to be bypassed. An attacker using a compromised or manipulated AI agent could push code to unauthorized repositories or escape the intended workspace boundaries.