Skip to content
OpenAdvisories

Vendor

EvoScientist

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

    EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetche…