CVE-2026-77930
EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents
EvoScientist EvoScientist
CVSS
9.3CriticalExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 20 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.56%Chance of exploitation activity in the next 30 days, higher than 46% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 0.2.5EvoScientistCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_async_task and runs commands with user privileges and environment secrets.
Text from CVE List
Affected versions 1
- EvoScientistaffected: 0.1.0 before 0.2.5CVE List
References 6
- github.com/EvoScientist/EvoScientist/commit/d249e320bd856a7d31d859cfbb2bf75bab6c8686Fixvia CVE List
- github.com/EvoScientist/EvoScientist/releases/tag/v0.2.5Fixvia CVE List
- vulncheck.com/advisories/evoscientist-0.1.0-before-0.2.5-human-approval-bypass-via-async-sub-agentsAdvisoryvia CVE List
- lasso.security/vulnerability-database/cve-2026-77930Exploitvia CVE List
- github.com/EvoScientist/EvoScientist/issues/387Referencevia CVE List
- github.com/EvoScientist/EvoScientist/blob/ac58caab7bdd1706f3fee55891f611cd175d05b0/EvoScientist/subagents/_factory.py#L116Referencevia CVE List