CVE-2026-112015
Received Received - Intake

Path Traversal in Omnigent via Sub-Agent CWD Manipulation

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: VulnCheck

Description
Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working directory, bypassing root-only validation in bundles.py, to read and write host files as the runner user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-112015
EUVD
EUVD-2026-103468

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
omnigent-ai omnigent 0.3.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a path traversal vulnerability in Omnigent versions 0.3.0 through 0.13.9. Authenticated users can exploit it by setting os_env.cwd in a nested sub-agent to an absolute or parent directory path. This bypasses workspace restrictions, allowing attackers to read or write arbitrary host files with the privileges of the runner user.

Detection Guidance

Check Omnigent version with: omnigent --version. If version is below 0.14.0, the system is vulnerable. Inspect uploaded bundles for sub-agents with absolute or parent-directory paths in os_env.cwd settings. Review file access logs for unauthorized reads/writes outside designated workspaces.

Impact Analysis

An attacker could access sensitive files on the host system, modify or delete critical files, or execute malicious code with the runner user's permissions. This is especially dangerous if the OS sandbox is disabled, as it allows full filesystem exposure.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's confidentiality rules. It may result in data breaches, unauthorized disclosures, and non-compliance with security and privacy standards.

Mitigation Strategies

Upgrade Omnigent to version 0.14.0 or later immediately. Disable untrusted agent bundle uploads if possible. Enable OS sandboxing (sandbox.type: none is unsafe). Set OMNIGENT_RUNNER_WORKSPACE environment variable to restrict file access. Monitor for suspicious file operations outside workspaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112015. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart