TI-2026-26705 CVE-2026-34430 · GHSA-gxx6-2vwg-3gc3ByteDance DeerFlow LocalSandboxProvider Host Bash EscapePriority LOW 39ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation…CVSS 4.0HIGH 8.6· Network · No auth · User interaction · EPSS 0.00407 · Published 2026-04-01 · Fixed CWE-184