Read the docs

ByteDance

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ByteDance records in CISA KEV

No ByteDance vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Deerflow 1 record MEDIUM

Records

8 records

TI-2026-29265 CVE-2026-40518 · GHSA-54pv-34f9-m4mq

ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode

Priority MEDIUM 64

ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name validation is bypassed.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00356 Published 2026-04-17 Fixed CWE-22
TI-2026-06033 CVE-2026-6878 · GHSA-h57c-v2v3-5v3v

ByteDance verl grader.py math_equal sandbox

Priority MEDIUM 61

A vulnerability was identified in ByteDance verl up to 0.7.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00333 Published 2026-04-23 No fix listed CWE-264
TI-2026-56382 CVE-2026-81735 · GHSA-p68p-fq8j-3639

Missing authentication in ByteDance UI-TARS-desktop

Priority MEDIUM 50

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to ever…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00779 Published 2026-08-27 Fixed CWE-306
TI-2026-26705 CVE-2026-34430 · GHSA-gxx6-2vwg-3gc3

ByteDance DeerFlow LocalSandboxProvider Host Bash Escape

Priority LOW 39

ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00407 Published 2026-04-01 Fixed CWE-184
TI-2026-25320 CVE-2026-32859 · GHSA-36m7-49vh-x3qh

ByteDance DeerFlow Stored XSS via Inline Artifact Rendering

Priority LOW 23

ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting vulnerability in the artifacts API that allows attackers to execute arbitrary scripts by uploading malicious HTML or script conten…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.002 Published 2026-03-27 Fixed CWE-79
Open these records in search →