CVE-2026-77930EUVD-2026-104687GHSA-626G-HX6F-FJ54
EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 0.2.5
- Public exploit
- None on Exploit-DB
CISA SSVC
- Exploitation: poc
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_async_task and runs commands with user privileges and environment secrets.
Affected versions
- EvoScientist EvoScientist
From 0.1.0 · fixed in 0.2.5