Threat · curated 25 Aug 2026
NVD - CVE-2026-62676
First reported nist.gov
Coverage timeline
Single-source advisory — first reported, latest, and curated coincide.
Why it matters
CVE-2026-62676 shows how an incomplete disallowed-input list in an AI coding-agent's command-gating policy lets a prompt-injected agent bypass repository allowlists and workspace confinement, turning policy guardrails into a false sense of security.
CVE-2026-62676 is a HIGH-severity (CVSS 7.1) flaw in Omnigent, an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shared shell-command parser in _shell.py fails to recognize combined interpreter flags, timeout/nice/setsid/stdbuf wrappers, command substitutions, and a background control operator, so a gated git push or gh write hidden in these forms produces no parsed operation, causing the repo/branch allowlist and workspace confinement policies to abstain and allow the command. An authenticated or prompt-injected agent can push to an unauthorized repository or branch or escape the intended workspace; fixed in version 0.3.0.