- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 1 critical, 3 high
- Weekly downloads
- 11.1K
- Dependents
- 3
- Registry
- PyPI
Advisories 4
- CVE-2026-62675High 8.8
Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools
Affected: fixed in 0.3.0.
- CVE-2026-62674Critical 9.0
Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE
Affected: fixed in 0.3.0.
- CVE-2026-62677High 8.8
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE
Affected: fixed in 0.3.0.
- CVE-2026-62676High 7.1
Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py
Affected: fixed in 0.3.0.