{"vulnerability": "CVE-2026-6267", "sightings": [{"uuid": "1f7bcb31-6eab-4a4b-bf13-0899ba5ff6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrthq3sak42p", "content": "The latest GitLab patch release fixes 13 vulnerabilities, including CVE-2026-6267, a high-severity data exposure flaw. Update self-managed GitLab now.\n\n#GitLab #CVE20266267 #DevSecOps #Vulnerability #PatchNow #InfoSec", "creation_timestamp": "2026-07-30T03:11:06.368813Z"}, {"uuid": "916e8d16-908a-4254-a4ed-b99923a3ab18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrumu73k2a2n", "content": "\ud83d\udd17 CVE : CVE-2025-14562, CVE-2026-12436, CVE-2026-13113, CVE-2026-14341, CVE-2026-14351, CVE-2026-15077, CVE-2026-15831, CVE-2026-15975, CVE-2026-16553, CVE-2026-3093, CVE-2026-4672, CVE-2026-6267, CVE-2026-6336", "creation_timestamp": "2026-07-30T14:15:31.261347Z"}, {"uuid": "f9d0bd16-8319-47d4-bbc2-5c967e5e5483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:46:06.340246Z"}, {"uuid": "4ad69a85-08af-41d2-a6a2-d47c88cff02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmh3r4ykm22", "content": "\ud83d\udd34 CVE-2026-62674 - Critical (9)\n\nOmnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62674/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T19:01:28.351772Z"}, {"uuid": "996d8def-cf4b-4680-abc6-f12f195f1baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62675", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnsu3qct2m", "content": "\ud83d\udfe0 CVE-2026-62675 - High (8.8)\n\nOmnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62675/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T21:01:45.348196Z"}, {"uuid": "5174b733-477c-4d57-81c6-3c6049d7dd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62677", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnt2msql2m", "content": "\ud83d\udfe0 CVE-2026-62677 - High (8.8)\n\nOmnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62677/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T21:01:52.351667Z"}, {"uuid": "1b779bcf-7fb4-4819-b086-7e4290342484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmugizzq425", "content": "CVE-2026-62674 - omnigent\nIn versions of Omnigent before 0.3.0, a user who has edit rights to a project could replace a shared component and cause the system to run any command they choose. Those\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#omnigent #omnigentai #CVE #infosec", "creation_timestamp": "2026-08-21T23:00:07.220608Z"}, {"uuid": "1dfb66a5-d602-4756-940b-16fe95f79cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mseide4ue72f", "content": "\ud83d\udccc CVE-2026-6267 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under... https://www.cyberhub.blog/cves/CVE-2026-6267", "creation_timestamp": "2026-08-05T21:37:07.180743Z"}, {"uuid": "50ad7182-14b3-456d-94c6-22872c8c1b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtpyz2gyov2f", "content": "CVE-2026-62674\nIn older versions of the Omnigent AI\u2011agent platform, a user who could edit a project could replace a shared component with malicious code. When later projects use that component, the malicious code runs with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-23T05:00:03.732018Z"}, {"uuid": "6671eec1-b3b8-4dce-988b-b013decbbded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrssq4z4eg24", "content": "CVE-2026-6267 - Insertion of Sensitive Information Into Sent Data in GitLab\nCVE ID : CVE-2026-6267\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 be...", "creation_timestamp": "2026-07-29T20:55:17.431929Z"}, {"uuid": "097bbe77-fcba-4697-a5b4-b61f72654fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrssz3rn6z23", "content": "\ud83d\udfe0 CVE-2026-6267 - High (8.5)\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6267/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T21:00:18.539857Z"}, {"uuid": "bc0634d3-bd8b-4602-bcfc-90aaf9d87aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://gist.github.com/alon710/b615767eb56d905c1ec60c5678ca05fa", "content": "# CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62674\n\n## Summary\nA critical validation flaw in the backend of the omnigent framework prior to version 0.3.0 allows authenticated users to overwrite the global shared agent bundle, leading to remote code execution on the runner process through malicious stdio MCP server configurations.\n\n## TL;DR\nA session update endpoint in the omnigent framework fails to restrict operations on shared/built-in agents, allowing low-privilege users to poison global agent templates and execute arbitrary system commands on runners.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.0\n- **EPSS Score**: 0.00343\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- omnigent-ai/omnigent\n\n## Mitigation\n\n- Upgrade the omnigent package to version v0.3.0 or later to apply the validation fix.\n- Manually restrict session updates on shared/template agents where session_id is None.\n- Sandbox runner processes inside microVMs or strict Docker environments with limited egress traffic.\n\n**Remediation Steps:**\n1. Identify all deployed instances of omnigent running versions below 0.3.0.\n2. Apply the patch to omnigent/server/routes/sessions.py to introduce the check 'if agent.session_id is None'.\n3. Configure network egress rules on runners to allow only authorized destination IPs.\n4. Restart the omnigent server and runner components.\n\n## References\n\n- [NVD - CVE-2026-62674](https://nvd.nist.gov/vuln/detail/CVE-2026-62674)\n- [GitHub Security Advisory GHSA-jrrm-9hc7-2v3h](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h)\n- [GitHub Pull Request 1418](https://github.com/omnigent-ai/omnigent/pull/1418)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62674) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T22:32:18.194521Z"}, {"uuid": "127c671f-bbae-4bc8-a472-7378694bd658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62675", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-756x-9hf6-q4h4", "content": "", "creation_timestamp": "2026-09-02T22:35:03.520380Z"}, {"uuid": "01fd6f70-cc4f-401f-bd50-29c303be7266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://gist.github.com/alon710/b615767eb56d905c1ec60c5678ca05fa", "content": "# CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62674\n\n## Summary\nA critical validation flaw in the backend of the omnigent framework prior to version 0.3.0 allows authenticated users to overwrite the global shared agent bundle, leading to remote code execution on the runner process through malicious stdio MCP server configurations.\n\n## TL;DR\nA session update endpoint in the omnigent framework fails to restrict operations on shared/built-in agents, allowing low-privilege users to poison global agent templates and execute arbitrary system commands on runners.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.0\n- **EPSS Score**: 0.00343\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- omnigent-ai/omnigent\n\n## Mitigation\n\n- Upgrade the omnigent package to version v0.3.0 or later to apply the validation fix.\n- Manually restrict session updates on shared/template agents where session_id is None.\n- Sandbox runner processes inside microVMs or strict Docker environments with limited egress traffic.\n\n**Remediation Steps:**\n1. Identify all deployed instances of omnigent running versions below 0.3.0.\n2. Apply the patch to omnigent/server/routes/sessions.py to introduce the check 'if agent.session_id is None'.\n3. Configure network egress rules on runners to allow only authorized destination IPs.\n4. Restart the omnigent server and runner components.\n\n## References\n\n- [NVD - CVE-2026-62674](https://nvd.nist.gov/vuln/detail/CVE-2026-62674)\n- [GitHub Security Advisory GHSA-jrrm-9hc7-2v3h](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h)\n- [GitHub Pull Request 1418](https://github.com/omnigent-ai/omnigent/pull/1418)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62674) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T00:00:27.580418Z"}, {"uuid": "7ce09b08-f00f-46a9-90c9-f899b5ae0cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62676", "type": "seen", "source": "https://gist.github.com/alon710/43bf5918e3d482ece766ad1a3e45b23b", "content": "# CVE-2026-62676: CVE-2026-62676: Security Guardrail Policy Bypass via Shell-Command Parser Flaws in Omnigent AI Agent Framework\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62676\n\n## Summary\nA high-severity security guardrail policy bypass vulnerability was identified in the Omnigent AI agent framework. The shell-command parser failed to correctly identify gated commands wrapped in certain command modifiers, combined interpreter flags, or command substitutions. Consequently, the default fail-open behavior allowed arbitrary execution of restricted operations.\n\n## TL;DR\nFlaws in Omnigent's shell-command parser allow command wrappers, interactive flags, or command substitutions to bypass security guardrails and run forbidden operations due to a fail-open default.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-184\n- **Attack Vector**: Network\n- **CVSS**: 7.1\n- **EPSS Score**: 0.00295\n- **EPSS Percentile**: 21.63%\n- **Impact**: Guardrail Policy Bypass\n- **Exploit Status**: POC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Omnigent Framework\n- **Omnigent**: < v0.3.0 (Fixed in: `v0.3.0`)\n\n## Mitigation\n\n- Upgrade the Omnigent AI framework to version v0.3.0 or later.\n- Restrict shell interpreters available within the execution environment.\n- Configure branch protection rules on repositories mapped to coding agents.\n\n**Remediation Steps:**\n1. Identify all deployment instances running Omnigent framework versions prior to v0.3.0.\n2. Update dependencies in requirements.txt or poetry configs to target omnigent>=0.3.0.\n3. Apply the patch manually to policies/builtins/_shell.py if direct framework upgrades are barred.\n4. Verify parsing improvements using test suites executing nested command configurations.\n\n## References\n\n- [GitHub Security Advisory GHSA-7mqg-cx4g-x2rf](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-7mqg-cx4g-x2rf)\n- [NVD Entry for CVE-2026-62676](https://nvd.nist.gov/vuln/detail/CVE-2026-62676)\n- [Vulnerability Fix Pull Request](https://github.com/omnigent-ai/omnigent/pull/389)\n- [Vulnerability Fix Commit](https://github.com/omnigent-ai/omnigent/commit/1a05b7b139ef504bf2be89bf37918abe104fb95c)\n- [Omnigent v0.3.0 Release](https://github.com/omnigent-ai/omnigent/releases/tag/v0.3.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62676) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T09:31:44.273501Z"}, {"uuid": "f6d83feb-8fb1-4a62-87e1-24320e54cb6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupwfz5eck2b", "content": "\u958b\u767a\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u300cGitLab\u300d\u3001\u8106\u5f31\u602713\u4ef6\u3092\u4fee\u6b63\n\nGitLab\u306f\u3001\u958b\u767a\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u300cGitLab 19.2.1\u300d\u300c\u540c19.1.3\u300d\u300c\u540c19.0.5\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u6700\u65b0\u30d0\u30fc\u30b8\u30e7\u30f3\u3078\u66f4\u65b0\u3059\u308b\u3053\u3068\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-6267\u300d\u306f\u3001\u300cWorkhorse\u300d\u306e\u5185\u90e8\u30ea\u30af\u30a8\u30b9\u30c8\u51e6\u7406\u306b\u304a\u3044\u3066\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u304c\u4e0d\u5341\u5206\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u958b\u767a\u8005\u30ed\u30fc\u30eb\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u304c\u672c\u6765\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u306e\u306a\u3044\u60c5\u5831\u3078\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002", "creation_timestamp": "2026-09-04T21:38:48.538629Z"}]}