OmniGen2-RL vulnerabilities

CVEs whose affected-version data names the OmniGen2-RL package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-25873Critical· 9.8PoC

7mo ago

OmniGen2-RL Reward Server Unsafe Deserialization RCE

OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending malicious HTTP POST requests. Attackers can exploit insecure…

▾ AbyssalBeijing Academy of Artificial Intelligence (BAAI) · OmniGen2-RLEPSS 1.1%via CVEORG