OmniRoute RCE via unauthenticated POST /api/acp/agents endpoint

OmniRoute versions 3.8.49 and earlier allowed remote code execution through the POST /api/acp/agents endpoint by passing attacker-controlled binary and versionCommand values that bypassed security filters. An unauthenticated attacker could execute arbitrary code on the server when requireLogin was false or during bootstrap.

Disclosed 10 September 2026 · Record updated 1 October 2026

Impact

Remote code execution in server container accessible to anonymous attackers when requireLogin=false or during bootstrap window

Our coverage

A rusted gate swings open in an empty warehouse as shadowy hands reach through, pulling levers on exposed machinery that obeys every command without question or resistance.

Vulnerabilities

AI gateway OmniRoute exposes remote code execution flaw

A custom agent endpoint in OmniRoute 3.8.49 and earlier let anonymous requests run arbitrary code on the server, and no fix was available at disclosure.

14 Sept 2026

Sources

nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-88062