Vulnerabilities

TI-2026-63838 CVE-2026-96680 · GHSA-8fch-9xj9-6929

ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization

MEDIUM 57

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00445 Published 2026-09-23 No fix listed CWE-862

TI-2026-56382 CVE-2026-81735 · GHSA-p68p-fq8j-3639

Missing authentication in ByteDance UI-TARS-desktop

MEDIUM 50

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to ever…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00779 Published 2026-08-27 Fixed CWE-306

TI-2026-09770 CVE-2026-11312 · GHSA-2vrg-7rqv-prf9

bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity

MEDIUM 55

A vulnerability was found in bytedance InfiniStore up to 0.2.33.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00112 Published 2026-06-05 No fix listed CWE-404

TI-2026-06147 CVE-2026-7023 · GHSA-gqvx-mchw-jjw5

ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection

MEDIUM 57

A vulnerability was detected in ByteDance coze-studio up to 0.5.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00365 Published 2026-04-26 No fix listed CWE-74

TI-2026-06033 CVE-2026-6878 · GHSA-h57c-v2v3-5v3v

ByteDance verl grader.py math_equal sandbox

MEDIUM 61

A vulnerability was identified in ByteDance verl up to 0.7.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00333 Published 2026-04-23 No fix listed CWE-264

TI-2026-29265 CVE-2026-40518 · GHSA-54pv-34f9-m4mq

ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode

MEDIUM 64

ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name validation is bypassed.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00356 Published 2026-04-17 Fixed CWE-22

TI-2026-26705 CVE-2026-34430 · GHSA-gxx6-2vwg-3gc3

ByteDance DeerFlow LocalSandboxProvider Host Bash Escape

LOW 39

ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00407 Published 2026-04-01 Fixed CWE-184

TI-2026-25320 CVE-2026-32859 · GHSA-36m7-49vh-x3qh

ByteDance DeerFlow Stored XSS via Inline Artifact Rendering

LOW 23

ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting vulnerability in the artifacts API that allows attackers to execute arbitrary scripts by uploading malicious HTML or script conten…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.002 Published 2026-03-27 Fixed CWE-79

Vulnerabilities

Filters