CVE-2026-77930 - Approval Bypass and Command Execution in EvoScientist

EvoScientist versions 0.1.0 through 0.2.4 are susceptible to an approval bypass vulnerability (CVE-2026-77930) that allows unauthenticated or remote attackers to achieve command execution. The flaw exists because the software fails to implement an interrupt_on gate when delegating tasks to asynchronous sub-agents. By planting malicious instructions within ingested content - such as external web pages - an attacker can trick the EvoScientist agent into invoking the start_async_task function. This results in the execution of arbitrary shell commands with the privileges and environment secrets of the user running the agent. This vulnerability is significant because it grants an attacker direct access to sensitive credentials and the ability to interact with the underlying host filesystem and network.

Impact

Successful exploitation allows for full command execution on the host machine. In enterprise environments where the EvoScientist agent is configured with high-privilege service accounts or has access to sensitive API keys and environment variables, this vulnerability could lead to total system compromise, data exfiltration, or lateral movement within the network.

Recommendation

• Upgrade EvoScientist to version 0.2.5 or later immediately to patch the missing interrupt_on gate logic.
• Restrict the privileges of the service account running the EvoScientist agent to the minimum necessary for its intended tasks.
• Implement egress filtering to prevent the agent from fetching arbitrary or untrusted external web content.