Skip to content
Bytedance vulnerabilities
Newest
-
bytedance coze-studio
Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
CVE-2026-77935
8.7 High
-
bytedance coze-studio
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
CVE-2026-77934
8.7 High
-
bytedance coze scraper extension
ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization
CVE-2026-96680
5.3 Medium
-
bytedance coze-studio
Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin
CVE-2026-92795
7.1 High
-
bytedance coze-studio
Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node
CVE-2026-92788
8.7 High
-
bytedance ui-tars-desktop
UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution
CVE-2026-81735
10.0 Critical
-
bytedance infinistore
bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity
CVE-2026-11312
4.8 Medium
-
bytedance coze-studio, coze studio +1 more
ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection
CVE-2026-7023
5.3 Medium
-
bytedance verl
ByteDance verl grader.py math_equal sandbox
CVE-2026-6878
6.3 Medium
-
bytedance deerflow, deer-flow +1 more
ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode
CVE-2026-40518
7.1 High
-
bytedance coze-studio
coze-studio aes.go hard-coded key
CVE-2025-9604
6.3 Medium