omnigent vulnerabilities (PyPI)
4 vulnerabilities.
-
omnigentPyPI Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools 8.8 High -
omnigentPyPI Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE 9.0 Critical -
omnigentPyPI Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE 8.8 High -
omnigentPyPI Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py 7.1 High