Evidence record / omnigent
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.
2026-10-13-omnigent-linux-bubblewrap-helpers-could-escape-through-host-temporary-files-before-v0-18
Linux bubblewrap helpers could escape through host temporary files before v0.18.0. On affected Linux bubblewrap deployments, code already executing inside a sandbox could access host temporary files, compromise the launcher and execute as the OS account running Omnigent. Administrator privileges were not required. The fix removes broad temporary-directory write grants from ACP, Goose, Kimi, Pi and Qwen helper paths, rejects write grants exposing the launcher directory and changes launcher files to owner-only permissions. This directly overturns the old unsandboxed-runner-only mitigation.
Channel: tagged-release. Half: defect. Date: 2026-10-13T08:57:51Z.
Operator consequence: Upgrade agent hosts to 0.18.0 and restart affected helper processes. Until then use the advisory’s disposable VM or container without sensitive host credentials or host filesystem mounts. A patched package on the central server does not replace already running helpers on another host.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-omnigent-linux-bubblewrap-helpers-could-escape-through-host-temporary-files-before-v0-18
Accepted signals
Profile citations
- omnigent / claim / bubblewrap-host-remediation
Source links
Primary links, including exact changelog lines when available.
- official docs2026-10-13-omnigent-linux-bubblewrap-helpers-could-escape-through-host-temporary-files-before-v0-18github.com/omnigent-ai/omnigent/security/advisories/GHSA-v3vj-mch3-x6c2commit2026-10-13-omnigent-linux-bubblewrap-helpers-could-escape-through-host-temporary-files-before-v0-18github.com/omnigent-ai/omnigent/commit/d2e077a1e3d502748ec0d792dfdede7319ccb968tagged commit file2026-10-13-omnigent-linux-bubblewrap-helpers-could-escape-through-host-temporary-files-before-v0-18omnigent-ai/omnigent / omnigent/inner/sandbox.py#L1247-L1287
Versioned source: run artifact