CVE-2026-112015 | omnigent-ai Omnigent up to 0.13.x Sub-agent handling bundles.py os_env.cwd path traversal

October 18, 2026 Yanac

A vulnerability was found in omnigent-ai Omnigent up to 0.13.x. It has been declared as critical. The impacted element is an unknown function of the file bundles.py of the component Sub-agent handling. Executing a manipulation of the argument os_env.cwd can lead to path traversal.

The identification of this vulnerability is CVE-2026-112015. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More