ByteDance

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ByteDance records in CISA KEV

No ByteDance vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Deerflow 1 record MEDIUM

Records

1 record in Deerflow · all components

TI-2026-29265 CVE-2026-40518 · GHSA-54pv-34f9-m4mq

ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode

MEDIUM 64

ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name validation is bypassed.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00356 Published 2026-04-17 Fixed CWE-22

Open these records in search →

Critical	1
High	2
Medium	5
Low	0
No CVSS	0