{"schema":"threatline.record/2","record":{"id":"CVE-2026-77930","aliases":[],"summary":"EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents","details":"EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_async_task and runs commands with user privileges and environment secrets.","categories":["Unclassified"],"product":"EvoScientist","vendor":"EvoScientist","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77930","source_modified_at":"2026-10-22T21:09:21.545Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"EvoScientist","vendor":"EvoScientist","versions":[{"version":"0.1.0","lessThan":"0.2.5","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77930","source_modified_at":"2026-10-22T21:09:21.545Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"EvoScientist","ecosystem":null},"version":"0.2.5","basis":"first unaffected version stated in the CVE record"}],"cvss":9.3,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00564,"percentile":0.4612,"score_date":"2026-10-23"},"published_at":"2026-10-20T00:46:10.763Z","modified_at":"2026-10-22T21:09:21.545Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-77930","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-22T21:09:21.545Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-77930","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.lasso.security/vulnerability-database/cve-2026-77930","tags":["technical-description","exploit"]},{"source":"CVE List","url":"https://github.com/EvoScientist/EvoScientist/issues/387","tags":["issue-tracking"]},{"source":"CVE List","url":"https://github.com/EvoScientist/EvoScientist/commit/d249e320bd856a7d31d859cfbb2bf75bab6c8686","tags":["patch"]},{"source":"CVE List","url":"https://github.com/EvoScientist/EvoScientist/releases/tag/v0.2.5","tags":["release-notes"]},{"source":"CVE List","url":"https://github.com/EvoScientist/EvoScientist/blob/ac58caab7bdd1706f3fee55891f611cd175d05b0/EvoScientist/subagents/_factory.py#L116","tags":["technical-description"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/evoscientist-0.1.0-before-0.2.5-human-approval-bypass-via-async-sub-agents","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"yes","technical_impact":"total","assessed_at":"2026-10-20T16:04:30.973347Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-22T21:09:21.545Z","content_hash":"aa8d97c0a53b1232aad2cdc8dcb6f79f212f8295f30fb6dec8fe122f418d04d7"}}