CVE-2026-112015 Details

A path traversal vulnerability has been identified in Omnigent versions 0.3.0 prior to 0.14.0. This vulnerability allows authenticated users to escape the designated workspace by manipulating the 'os_env.cwd' property on nested sub-agents. Attackers can upload a bundle that includes a sub-agent with an absolute or parent-traversing working directory. This bypasses the validation that is supposed to be enforced for root agents, enabling the sub-agent to access and modify host files as the user running the agent.

Users are advised to upgrade to Omnigent version 0.14.0 or later. The 0.14.0 release includes a fix that validates working directories for the root agent, all terminals, and recursively for nested sub-agents and their terminals, rejecting any absolute paths or parent-directory traversals that could escape the workspace.