PRODUCT PROFILE

OmniRoute

Created from vulnerability 18563 relation agent

关联漏洞

共找到 1 条公开漏洞记录

严重CVE-2026-88062未授权访问2026/09/30

OmniRoute < 3.8.49 - Unauthenticated RCE

OmniRoute <= 3.8.49 contains a remote code execution caused by insufficient validation of interpreter arguments in the POST /api/acp/agents endpoint, letting remote attackers execute arbitrary code, exploit requires anonymous access when requireLogin is false or management session/API key when true.

PoC 已收录RCEOmniRoute

CVSS9.5EPSS 1.4%