Skip to content
OpenAdvisories

Product · bytedance

DeerFlow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-34430

    ByteDance DeerFlow LocalSandboxProvider Host Bash Escape

    ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation using shell features such as directory …

    bytedance DeerFlow