Skip to content
OpenAdvisories

Product · bytedance

deer-flow

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-40518

    ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode

    ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name validation is bypassed. Attackers can supply traversal-style values or absolute paths as the…

    bytedance deer-flow