CVE-2026-88062
OmniRoute, an open‑source AI gateway, has a critical flaw that lets attackers run arbitrary code on the server. The vulnerability exists in versions 3.8.49 and earlier, where the POST /api/acp/agents endpoint accepts attacker‑controlled commands. Because the server executes these commands without proper validation, a remote user can run any code on the container.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
OmniRoute open‑source AI gateway, versions 3.8.49 and earlier. Users running these versions are at risk, especially if the API is exposed to the internet or if anonymous access is allowed.
Real-world impact
An attacker could run any command on the server container, potentially taking full control of the system, exfiltrating data, or using the machine for further attacks.
Why this severity
The CVSS score of 9.5 reflects the combination of network accessibility, low authentication and privilege requirements, and the high impact of code execution. The vulnerability allows attackers to execute arbitrary code with no user interaction, giving them full control over the affected system.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources