Vulnerabilities in ByteDance

6 results

CVE-2026-81735CRITICALUI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command ExecutionEPSS 0.8%CVE-2026-96680MEDIUMByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorizationEPSS 0.4%CVE-2026-7023MEDIUMByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injectionEPSS 0.4%CVE-2026-40518HIGHByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap ModeEPSS 0.4%CVE-2026-6878MEDIUMByteDance verl grader.py math_equal sandboxEPSS 0.3%CVE-2026-11312MEDIUMbytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexityEPSS 0.1%