An authenticated path traversal vulnerability in Omnigent before version 0.3.0 enables unauthorized file system access and potential manipulation by malicious actors.

The application fails to properly sanitize input, leading to improper limitation of a pathname to a restricted directory (CWE-22). An authenticated attacker can manipulate file paths to access sensitive configuration files or overwrite system files.

Successful exploitation allows attackers to bypass file system restrictions, potentially leading to the disclosure of sensitive credentials or the corruption of system integrity. The CVSS score of 8.8 reflects the high risk associated with unauthorized file access in an orchestration framework.

Immediate Action: Upgrade to Omnigent version 0.3.0 or later to ensure proper path validation logic is applied.

Proactive Monitoring: Monitor file access logs for directory traversal patterns such as multiple dot-dot-slash sequences directed at restricted application directories.

Compensating Controls: Utilize a Web Application Firewall (WAF) or filesystem-level access controls to restrict the application process from accessing sensitive directories outside of its designated scope.

Public Exploit Available: Unknown

Administrators should update to the latest version of Omnigent to remediate this vulnerability. Ensuring that the application environment follows the principle of least privilege is recommended to further limit the potential impact of file system manipulation.