TI-2026-20913 CVE-2026-25873 · GHSA-38h5-7g7p-55vvOmniGen2-RL Reward Server Unsafe Deserialization RCEPriority HIGH 81OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending malicious HTTP POST requests.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01142 · Published 2026-03-18 · No fix listed CWE-502