Skip to content
OpenAdvisories

Vendor

bytedance

8 known vulnerabilities.

Products

DeerFlow 2 deer-flow 1 Coze Scraper Extension 1 UI-TARS-desktop 1 verl 1 InfiniStore 1 coze-studio 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-40518

    ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode

    ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name validation is bypassed. Attackers can supply traversal-style values or absolute paths as the…

    bytedance deer-flow
  • High 8.8
    CVE-2026-34430

    ByteDance DeerFlow LocalSandboxProvider Host Bash Escape

    ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation using shell features such as directory …

    bytedance DeerFlow